in reply to Re: Preventing SQL injection attacks: are -T and placeholders not enough?
in thread Preventing SQL injection attacks: are -T and placeholders not enough?

Fortunately, non-static SQL is often a sign of evil database design :)

  • Comment on Re^2: Preventing SQL injection attacks: are -T and placeholders not enough?

Replies are listed 'Best First'.
Re^3: Preventing SQL injection attacks: are -T and placeholders not enough?
by ChemBoy (Priest) on Jan 10, 2008 at 20:37 UTC

    Oddly, however, knowing that your database design is evil doesn't necessarily help you write more secure code for it. ;-)



    If God had meant us to fly, he would *never* have given us the railroads.
        --Michael Flanders

      ++ :)