Re^6: Preventing malicious T-SQL injection attacks

I think that it would be good when SELECT is used in a similar circumstance. But when that particular feature is used with EXEC I believe it is redundant code and therefore is best not used.

Comment on Re^6: Preventing malicious T-SQL injection attacks

Replies are listed 'Best First'.
Re^7: Preventing malicious T-SQL injection attacks by davorg (Chancellor) on Mar 05, 2007 at 16:55 UTC
But what is redundant? What would you remove? Like I said, this is a completely free feature. There is no code in there which specifically checks for the right number of parameters, it's just something that `execute` gives you for free. There is no redundancy. There is nothing to remove. If you find something to remove then I'd love to see it. -- <http://dave.org.uk> "The first rule of Perl club is you do not talk about Perl club." -- Chip Salzenberg	[reply]
A reply falls below the community's threshold of quality. You may see it by logging in.


Clear questions and runnable code get the best and fastest answer
	PerlMonks