All geek questions in one place

SQL injection on classic ASP pages with parameterized queries: text fields

I configured my queries in my classic ASP application, but I'm not sure if I need to sanitize or clean up the free text fields or if the parameterization is enough to prevent injections.

+3
source share
2 answers

Not all sql stored procedures are injection safe

http://palisade.plynt.com/issues/2006Jun/injection-stored-procedures/

+2
source

If you use parameterized queries, you are protected against SQL injection attacks.

XSS; HTML- ( <script>, <object>) , .

+6

Source: https://habr.com/ru/post/1729462/

More articles:


All Articles