A.R.M. Yourself Against SQL InjectionTuesday, August 08, 2006To effectively protect your web application from SQL injection attack, you must ARM yourself. That is, when writing applications, be sure to validate all input strings. There are three, and only three, options when given a piece of data:
So what does it mean to ARM yourself? Well, one good step is to use the string cleansing functions of your programming language. Also, if a field is supposed to be a number then explictly convert it from a string to number. I originally talked about this at the ACMSE-2006 conference in May. I will have to write up some more on the topic at a later date.
Posted by Frank R at
6:19 PM
|
Recent Posts
ArchivesApril 2005 / May 2005 / June 2005 / July 2005 / August 2005 / November 2005 / April 2006 / June 2006 / August 2006 / September 2006 / November 2006 / December 2006 / January 2007 / January 2008 / August 2008 / January 2009 / |
Home | My Programs | Privacy | Contact