Home Forums SQL Server 2005 Administering how to overcome sql injection RE: how to overcome sql injection

  • July 15, 2008 at 7:01 am

    #843060

    paulhunter (7/15/2008)

    In the .NET world you don't grant access to the internal code and data structures except thru properties and methods, so don't treat your database differently.

    THAT is one of the best justifications for stored procedures that I've seen. Thanks, Paul.

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)