in reply to Re: Re: (z) Separation of SQL code
in thread (z) Separation of SQL code
At eCircles (unfortunately dead now) we had a web site with around 80k lines of perl code, of which 400 were database-specific (using Sybase::CTlib), and with table-driven definitions for each stored procedure (i.e. logical database request). And because we were using Sybase's RPC functionality to call the procs there was 0 risk of SQL injection as there was no SQL parsing involved anywhere in the execution path.
DBD::Sybase is capable of using the RPC functionality as well
Michael
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re: Re: Re: Re: (z) Separation of SQL code
by demerphq (Chancellor) on Sep 12, 2003 at 16:18 UTC | |
by mpeppler (Vicar) on Sep 12, 2003 at 17:15 UTC | |
by Abigail-II (Bishop) on Sep 12, 2003 at 20:37 UTC | |
by demerphq (Chancellor) on Sep 13, 2003 at 10:45 UTC |