Archive of Defense Dynamic Cursors Execute sp_executesql Stored Procedure
Prevent SQL injection.
-
Secure Stored Procedure
Posted in Stored Procedures DefensePrevent SQL injection attacks against stored procedures. As explained in the article about SQL injection attacks against stored procedures, it is possible to create procedures vulnerable to SQLIA. This article details how you can secure your code against SQL injections. As recommended in...
Continue reading this entry → -
Secure PL/SQL
Posted in Stored Procedures DefensePrevent SQL injection attacks against PL/SQL. As explained in the article about SQL injection attacks against PL/SQL, it is possible to create procedures vulnerable to SQLIA. This article details how you can secure PL/SQL code against SQL injections by making only...
Continue reading this entry → -
mysql_real_escape_string SQL injection
Posted in PHPUnderstanding how to safely use mysql_real_escape_string function. PHP provides mysql_real_escape_string() to escape special characters in a string before sending a query to MySQL. This function was adopted by many to escape single quotes in strings and by the same occasion prevent SQL injection attacks. However, it can create...
Continue reading this entry → -
SQL Injection Risks
Posted in SQL Injection IntroductionSecurity impact of SQL injection and risk associated to vulnerable systems. Understanding the risks of SQL injections is non negligible for anyone who might be concerned by this security issue. Whether you are a business decision maker, a developer or a system administrator, you need to be aware of the possible...
Continue reading this entry →
