Get ready for BLACK FRIDAY shopping starting in

Forums

This topic is locked

SQL Injection and recordset

Posted 07 Sep 2005 09:44:00
1
has voted
07 Sep 2005 09:44:00 Dom Dom posted:
Hello

I wish to know if when I use the recordsert wizard in Dreamweaver (for a search into DB), my application is protected against SQL Injection?

Or must I protect by myself the code?

A lot of ths for your answer.
Regards, Dominique

Replies

Replied 07 Sep 2005 17:54:52
07 Sep 2005 17:54:52 Michael Behan replied:
dremweaver doesnt do anything to pretect against this (which can be usefull). If you're using asp.net the server automatically protects you (will return an error page if someone tries to type SQL into a form (can be turned off). If you want to prevent this manually you can encode and unencode your querystrings. How you do this will depend on your server language.

Reply to this topic