Re: field validation (was Re: COBOL/DB2 Date edit question)



"Howard Brazee" <howard@xxxxxxxxxx> wrote in message
news:v9f3c3pksoedvbjlg8st6ve52o6b7o1bov@xxxxxxxxxx
On Tue, 14 Aug 2007 16:57:43 +0300, Binyamin Dissen
<postingid@xxxxxxxxxxxxxxxxxx> wrote:


Why are they counting digits? Because editing is Right and Proper?

No, Howard, editing string length for input fields on web pages is a
valuable and accepted line of defence against SQL inection attacks. (It is
only one measure, but a very important one)

It is a pain (I hate writing it), but in today's world it is a necessary
evil.

Pete.
--
"I used to write COBOL...now I can do anything."


.