Other News

Editorials

SQL Injection – What to Do?

SQL Injection – What to Do? Lots of good responses regarding what to do in the short term for SQL Injection. Before I list some of the great triage answers today, let me make a simple reminder of how to stop SQL Injection. The easiest answer is simple…use strongly typed parameters whenever you interact with your database. Most data access […]

Uncategorized

SQL Injection is Still Around

SQL Injection – It’s Still Around Recently I received an email from a colleague consulting for a company that has exposure for SQL Injection. They use a parameterized stored procedure, and determined that they had resolved their exposure to SQL Injection . SQL Injection occurs when a user embeds SQL Statements in input fields of an application or web form. […]