Re: SQL injection

Поиск
Список
Период
Сортировка
От Dan Sugalski
Тема Re: SQL injection
Дата
Msg-id a06230902bf8c118160ca@[192.168.0.3]
обсуждение исходный текст
Ответ на SQL injection  (Yonatan Ben-Nes <da@canaan.co.il>)
Список pgsql-general
At 7:54 PM +0200 10/31/05, Yonatan Ben-Nes wrote:
>Hi all,
>
>I'm currently trying to build a defence against SQL INJECTION, after
>reading some material on it I arrived to few possible solutions and
>I would like to know if anyone can comment anything about them or
>maybe add a solution of its own:

Just out of curiosity, is this something that constant SQL (or SQL
generated by code) with placeholder variables won't protect against?
--
                Dan

--------------------------------------it's like this-------------------
Dan Sugalski                          even samurai
dan@sidhe.org                         have teddy bears and even
                                       teddy bears get drunk

В списке pgsql-general по дате отправления:

Предыдущее
От: Ben
Дата:
Сообщение: Re: SQL injection
Следующее
От: "A. Kretschmer"
Дата:
Сообщение: Re: replace() and Regular Expressions