Beefy Boxes and Bandwidth Generously Provided by pair Networks
Syntactic Confectionery Delight

Re^4: Multiple SQL statements in DBI

by tel2 (Monk)
on Sep 07, 2012 at 22:16 UTC ( #992391=note: print w/replies, xml ) Need Help??

in reply to Re^3: Multiple SQL statements in DBI
in thread Multiple SQL statements in DBI

Thanks Dave.  Yeah - I've been using placeholders & bind-variables, but did wonder about the need for those given my findings with DBI not allowing multiple statements, but you've semi-answered that, so thanks!

Replies are listed 'Best First'.
Re^5: Multiple SQL statements in DBI
by davido (Archbishop) on Sep 07, 2012 at 22:24 UTC

    Well for one thing a malicious user could supply the necessary values for interpolation, and in the last value, close the parents and continue on with an inner join that is constructed to reveal what you never intended to reveal, or to consume tons of resources. Imagine a chain of "order by".


Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://992391]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others rifling through the Monastery: (7)
As of 2018-01-22 09:24 GMT
Find Nodes?
    Voting Booth?
    How did you see in the new year?

    Results (233 votes). Check out past polls.