Re^5: Cryptology in the database


XP is just a number
	PerlMonks

Re^5: Cryptology in the database

by andreas1234567 (Vicar)

on Mar 31, 2008 at 10:28 UTC ( [id://677495]=note: print w/replies, xml )

Need Help??

in reply to Re^4: Cryptology in the database
in thread Cryptology in the database

SQL injection [is] a really tough hole to protect against

Not really. Revoke SELECT, INSERT, UPDATE, DELETE privileges from you application's user account and grant access to your data through stored procedures only (provided that the DBMS of your choice supports it). That's what I consider the most effective SQL injection prevention.

See also Avoiding SQL Injection (owasp.org).

--
Andreas