I am using SQL Server 2005, I have some select and update
statements in my query with WHERE clause

I want to prevent these queries from SQL injection attacks.
What are the steps and precautions to be taken for SQL
Injection attacks?
Does anybody have suggestions?


Thanks in advance,

Answer Posted / murtaza

use DML triggers which helps u to prevent any modifications.

Is This Answer Correct ?    2 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

How can you insert values in multiple rows using one Insert statement?

615


what are the new features in SSRS?

104


Can we insert data into view sql server?

508


Hi, I Created 3 Tables Person(PersID[prkey],Name,Email,Password), Project(ProjName,ProjID[prkey],ProjLeader,ProjManager) & ProjectInvolvement(EntryDate,ProjID[frkey],PersID[frkey],ProjDuration). For this how can i INSERT,UPDATE & DELETE Through PROCEDURE? Please Post the Answer for me. Desai.

1419


What is dirty read?

624






List the different normalization forms?

535


Can truncate be rolled back?

535


Tell me what is sql profiler?

615


what is the sql equivaent of the dataset relation object ?

1566


Do you know what guidelines should be followed to help minimize deadlocks?

532


What you can do to delete a table without the delete trigger firing?

517


If any stored procedure is encrypted, then can we see its definition in activity monitor?

543


Explain the difference between control flow and data flow?

525


what is a correlated sub-query? : Sql server database administration

480


What are the extra roles available in msdb? : sql server security

635