Posted by Roy Harvey (SQL Server MVP) on 11/16/07 20:38

On Fri, 16 Nov 2007 01:31:14 -0800 (PST), ofiras <ofiasu@gmail.com>
wrote:

>I'm a web programmer, but I never understood sql injecting.

One piece worth reading:

http://www.sommarskog.se/dynamic_sql.html#SQL_injection

Roy Harvey
Beacon Falls, CT

• Next in forum: Re: Tracking Record Lineage, Family, etc.
• Prev in forum: Fact Design Question in SQL Server
• Thread view: Re: Sql injecting

[Reply to this message]