mirror of
https://github.com/EiffelSoftware/eiffel-org.git
synced 2025-12-07 07:12:25 +01:00
Update wikipage EiffelStore SQL injection. (Signed-off-by:javier).
git-svn-id: https://svn.eiffel.com/eiffel-org/trunk@1764 abb3cda0-5349-4a8f-a601-0c33ac3a8c38
This commit is contained in:
@@ -20,5 +20,5 @@ A SQL injection attack is a coding technique that consists of insertion or "inje
|
|||||||
= 2. Template Query =
|
= 2. Template Query =
|
||||||
A template query is a string containing the fixed parts of the query and placeholders for the variable parts, and you can later substitute in values into those placeholders. (Bind variables to the query.). A template query could be static or dynamic
|
A template query is a string containing the fixed parts of the query and placeholders for the variable parts, and you can later substitute in values into those placeholders. (Bind variables to the query.). A template query could be static or dynamic
|
||||||
|
|
||||||
Note: the way you bind variables to the query is quite important and it will define if your query is safe and avoid a SQL Injection attack.
|
{{Note|the way you bind variables to the query is quite important and it will define if your query is safe and avoid a SQL Injection attack.}}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user