Preventing sql injection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: pgsql-admin@xxxxxxxxxxxxxx
Subject: Preventing sql injection
From: Rick Roman <rick@xxxxxxxxx>
Date: Wed, 10 Aug 2005 10:02:05 -0700
User-agent: Mozilla Thunderbird 1.0.6-1.1.fc3 (X11/20050720)

I have a web application that will allow users to submit comments. Thedatabase activity consists of a single insert statement into a commentstable. I want to lock down this operation against sql injection attacks.Can someone point me to a discussion of general principles? I've seenreference to V3 extended-query protocol. Where is this invoked? Othersuggestions?

Follow-Ups:
- Re: Preventing sql injection
  - From: Alvaro Herrera

Prev by Date: Re: problem during amrestore
Next by Date: Re: Preventing sql injection
Previous by thread: problem during amrestore
Next by thread: Re: Preventing sql injection
Index(es):
- Date
- Thread

[Index of Archives] [KVM ARM] [KVM ia64] [KVM ppc] [Virtualization Tools] [Spice Development] [Libvirt] [Libvirt Users] [Linux USB Devel] [Linux Audio Users] [Yosemite Questions] [Linux Kernel] [Linux SCSI] [XFree86]

Powered by Linux