Skip to Content.
Sympa Menu

freetds - Re: [freetds] Prepared statement + date fields

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: KERTEL - Maxime MARAIS <mmarais AT kertel.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] Prepared statement + date fields
  • Date: Fri, 02 Jun 2006 15:30:24 +0200

Bort, Paul a écrit :
I can't think of anyway that using placeholders guards against
miscellaneous code executution.

I think that the binding process automatically handles escaping single
quotes, so it stops SQL injection attacks.

That's right. Reason why I wanted to use it.

--
Maxime MARAIS
Kertel.





Archive powered by MHonArc 2.6.24.

Top of Page