note 86959 added to security.database.sql-injection

the best prevention is to deactivate master..xp_cmdshell. Run in isql the command [I]sp_configure 'xp_cmdshell'[/I] If the value for "config value" is 1 then make in the isql [I]sp_configure 'xp_cmdshell',0[/]. If you want see the options from your mssql-Server make [I]sp_configure 'show advanced options',1[/I] and then [I]sp_configure[/I] ---- Server IP: 69.147.83.197 Probable Submitter: 91.18.159.244 ---- Manual Page -- http://www.php.net/manual/en/security.database.sql-injection.php Edit -- https://master.php.net/note/edit/86959 Del: integrated -- https://master.php.net/note/delete/86959/integrated Del: useless -- https://master.php.net/note/delete/86959/useless Del: bad code -- https://master.php.net/note/delete/86959/bad+code Del: spam -- https://master.php.net/note/delete/86959/spam Del: non-english -- https://master.php.net/note/delete/86959/non-english Del: in docs -- https://master.php.net/note/delete/86959/in+docs Del: other reasons-- https://master.php.net/note/delete/86959 Reject -- https://master.php.net/note/reject/86959 Search -- https://master.php.net/manage/user-notes.php