Petition Summary: We call on XKCD and Randall Munroe to update the beloved "Bobby Tables" comic (#327) to reflect the best practice for defending against SQL injection attacks. The original comic humorously addresses SQL injection vulnerabilities but promotes a flawed approach by suggesting data sanitization. Today, query parameterization is the most effective and widely recommended defense for SQL injection. By revising this popular comic, XKCD can continue to be an educational resource that champions modern security practices.

Why This Is Important: The “Bobby Tables” comic has long been a staple in the tech community, used to raise awareness of the dangers of SQL injection. However, it unintentionally conveys an outdated and less effective security practice: input sanitization. While input sanitization can reduce risks, it’s not sufficient against modern attacks. Leading security experts agree that query parameterization is the best way to protect databases from SQL injection.

As the comic remains highly referenced by developers, security professionals, and educators, it is essential that it reflects current best practices. An updated version would serve as a more accurate teaching tool for newcomers and help ensure that developers are guided towards the most secure solution.

Our Request: We respectfully ask XKCD and Randall Munroe to update the “Bobby Tables” comic to promote query parameterization as the primary defense against SQL injection. This change would not only uphold XKCD’s reputation as a source of witty and insightful commentary but also reinforce the importance of following correct, modern security protocols.

Sign This Petition if You:

Believe in educating developers with the most accurate security advice.
Want to see the "Bobby Tables" comic continue to be relevant and helpful for the tech community.
Support the movement to protect data and applications through proper security measures.
Together, we can encourage XKCD to take a simple, meaningful step that can help secure software development for future generations.

Thank you for your support!