note 114108 deleted from security.database.sql-injection by sobak
| From: | sobak@php.net | Date: | Tue, 22 Nov 2016 08:31:19 +0000 |
| Subject: | note 114108 deleted from security.database.sql-injection by sobak | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-207490@lists.php.net to get a copy of this message | ||
Note Submitter: nemeth dot zsolt dot dr at gmail dot com
----
You can avoid the sql injection using views and stored procedures. Never give direct access to
tables! Stored procedures can be protected by special parameters (e.g user id + password)