sql-injection
How to improve PHP code against SQL injection and other threats
How can I modify this code to improve protection against sql injection and other threats? It is a MS SQL database.[详细]
2023-04-09 08:48 分类:问答Avoiding SQL injection when saving user-agent using ASP.net
I\'m saving the browser user-agent of my users for stats purposes. As you already know, user-agent can be modified. I would like to know if I should do anything to protect against SQL Injection.[详细]
2023-04-08 14:56 分类:问答Why do we always prefer using parameters in SQL statements?
I am very new to working with databases. Now I can write SELECT, UPDATE, DELETE, and INSERT commands. But I have seen many forums where we prefer to write:[详细]
2023-04-06 07:39 分类:问答regex expressions prevent sql/script injection
I am trying to create a regex expression for client side validation (before server side validation which will also take place) to prevent sql/script injection i.e something like this - which does not[详细]
2023-04-05 14:05 分类:问答Escaping user input from database necessary?
So I know about MySQL injection and always escape all my user input before putting it in my database. However I was wondering, imagine a user tries to submit a query to inject, and I escape it. What i[详细]
2023-04-05 11:58 分类:问答Do values coming directly from the database need to be escaped?
Do I need to escape/filter data that is coming from the database?Even if said data has already been \"escaped\" once (at the point in time where it was inserted into the database).[详细]
2023-04-05 00:25 分类:问答TSQL + C#: Dynamically changing the Database in use
I have stumbled across a problem and I can\'t think of a nice, SAFE way of completing it. I have a wrapper class around the \"Sql.Helper\" class (Microsoft.ApplicationBlocks.Data) and I am using Param[详细]
2023-04-04 22:31 分类:问答re SQL Injection Attack using MySQL, does this meet baseline requirements? [duplicate]
This question already has answers here: How can I prevent SQL injection in PHP? (27 answers) Closed 2 years ago.[详细]
2023-04-04 14:48 分类:问答SQL Injection Protection
I thought I would get your opinion on an option I thought that would essentially eliminate the possibility of SQL injection 开发者_JAVA百科(I think).[详细]
2023-04-03 05:18 分类:问答Can federated login (OpenID, e.g.) pose SQL injection risk?
Can all identity providers be safely assumed to sanitize user information, or could one create an account or identity provider to deliver malicious usernames, emails, contact lists开发者_如何学Python,[详细]
2023-04-03 01:35 分类:问答