Preventing SQL Injection Attacks

Keep your code secure against intruders. In an article in WWWCoder, they provide examples of SQL injection attacks and how you can write code to prevent them. Stop people from getting information from your database.



SQL injection attacks take advantage of code that does not filter input that is being entered directly into a form. Susceptible applications are applications that take direct user input and then generate dynamic SQL that is executed via back-end code. For example say you have a logon form that accepts a user name and password. Once authenticated against the database, the application then sets a session value, or some other token for allowing the user to access the protected data.