Re: SQL Injection???

["Raul A. Jager W." <raul@xxxxxxxxxx>]

If CGIDEV uses only native I/O, then is is fully protected.

When using SQL, I don't think there is a simple formula, you need to 
validate all input fields before executing the SQL.  I'm not sure if 
static SQL is vulnerable to injection, probably not.  Somebody knows for 
sure?
_____________________________________________________________
Shane_Cessna@xxxxxxx wrote:

> All:
>
> Has anyone using CGIDEV2 implemented a solution to prevent SQL Injection 
> attacks in your applications?  If so, what did you use and how did you do 
> it?
>
> This is one of my security goals for this year in case you're curious.
>
> Shane Cessna
> Senior Programmer
> North American Lighting, Inc.
> 217.465.6600 x7776 
>