Forums
This topic is locked
SQL Injection and recordset
07 Sep 2005 09:44:00 Dom Dom posted:
HelloI wish to know if when I use the recordsert wizard in Dreamweaver (for a search into DB), my application is protected against SQL Injection?
Or must I protect by myself the code?
A lot of ths for your answer.
Regards, Dominique
Replies
Replied 07 Sep 2005 17:54:52
07 Sep 2005 17:54:52 Michael Behan replied:
dremweaver doesnt do anything to pretect against this (which can be usefull). If you're using asp.net the server automatically protects you (will return an error page if someone tries to type SQL into a form (can be turned off). If you want to prevent this manually you can encode and unencode your querystrings. How you do this will depend on your server language.