Skip to Content.
Sympa Menu

freetds - Re: [freetds] Prepared statement + date fields

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "Bort, Paul" <pbort AT tmwsystems.com>
  • To: "FreeTDS Development Group" <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] Prepared statement + date fields
  • Date: Fri, 2 Jun 2006 09:26:32 -0400

> I can't think of anyway that using placeholders guards against
> miscellaneous code executution.
>

I think that the binding process automatically handles escaping single
quotes, so it stops SQL injection attacks.




Archive powered by MHonArc 2.6.24.

Top of Page