This is a discussion on Prevention Measures to Avoid SQL Injection within the Database Support forums, part of the Web Development category; Measures to avoid SQL injection 1 Validate all input coming from the user on the server. 2 Avoid the use ...
| |||||||
| Register | FAQ | Members List | Calendar | Mark Forums Read |
| |||
| Measures to avoid SQL injection 1 Validate all input coming from the user on the server. 2 Avoid the use of dynamic SQL queries if there an alternate method is available. 3 Use parameterized stored procedure with embedded parameters. 4 Execute stored procedures using a safe interface such as Callable statements in JDBC or CommandObject in ADO. 5 Use a low privileged account to run the database. 6 Give proper roles and privileges to the stored procedure being used in the applications. |
| Sponsored Links |
![]() |
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Sql Injection | vadivelanshanmugam | Database Support | 0 | 01-31-2008 09:51 PM |
| security measures for .NET Remoting | Arun | ASP and ASP.NET Programming | 1 | 08-18-2007 12:15 AM |
| Microsoft takes new privacy measures | senthilkannan | Microsoft | 0 | 07-23-2007 03:03 AM |
| What is SQl injection ? | sundarraja | Database Support | 1 | 07-21-2007 12:50 AM |
| SQL injection technique | Jeyaseelansarc | PHP Programming | 1 | 05-16-2007 07:34 AM |