Preventing SQL Injections ?
From: Skybuck Flying (nospam_at_hotmail.com)
Date: 03/29/04
- Next message: Skybuck Flying: "help could use some examples."
- Previous message: Brian Bushay TeamB: "Re: checking for error following an UPDATE"
- Next in thread: Skybuck Flying: "Re: Preventing SQL Injections ?"
- Reply: Skybuck Flying: "Re: Preventing SQL Injections ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Mon, 29 Mar 2004 07:09:20 +0200
Hi,
Does delphi's TADOQuery prevent SQL Injections when using parameters ?
For example:
ADOQuery1.Close;
ADOQuery1.Parameters.ParamValues[ 'GameName' ] := EditGameName.Text;
ADOQuery1.SQL.Text := 'SELECT GameName FROM TableGame WHERE
GameName=:GameName';
ADOQuery1.Open;
In other words... does Delphi check the input from EditGameName.Text when it
is passed to a parameter ?
Bye,
Skybuck.
- Next message: Skybuck Flying: "help could use some examples."
- Previous message: Brian Bushay TeamB: "Re: checking for error following an UPDATE"
- Next in thread: Skybuck Flying: "Re: Preventing SQL Injections ?"
- Reply: Skybuck Flying: "Re: Preventing SQL Injections ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
|
