Re^2: Preventing malicious T-SQL injection attacks

[Win]

in reply to Re: Preventing malicious T-SQL injection attacks
in thread Preventing malicious T-SQL injection attacks

What is the best way of checking that the looked up value in the hash is the same as $elements_in_array for the key $SPROC?

  my %procs = (
         reception => 29
  );

    unless (exists $procs{$SPROC}) {
      die "Unknown stored proc: $SPROC\n";
    }

 $Command = join(' ', 
            'EXEC', 
            $SPROC, 
            join(', ', 
             @CHOICE[1 .. $elements_in_array])) . '';   

[davorg]

What is the best way of checking that the looked up value in the hash is the same as $elements_in_array for the key $SPROC?

Ok, now I'm really puzzled. That's exactly the same check that you have been claiming is unnecessary. Why do you now want to add it?

But to answer your question, if you want to see if two numbers are equal, then I recommend the "==" operator.