SQL injection attacks

[Guest]

I would like to get more information on securing my windows apps from SQL
injection attacks. There is so much stuff on web apps, but I can't find info
on win apps.
Can you help me

 

[Jon Skeet [C# MVP]]

I would like to get more information on securing my windows apps from SQL
injection attacks. There is so much stuff on web apps, but I can't find info
on win apps.

The same kind of things apply. The main thing to do is never use values
from the user directly in SQL statements - *always* use SQL parameters
instead.

 

[DalePres]

There are two great pdf files on SQL injection at:

http://spilabs.com/support/whitepapers/index.html

and some more at:

http://www.appsecinc.com/techdocs/whitepapers/research.html

I would suggest them to any and every developer of applications using SQL
Server.

DalePres
MCAD, MCDBA, MCSE