SQL injection
Input that changes the meaning of an SQL query. Parameterised queries and appropriate permissions are key defences; stripping selected characters is insufficient.
Sources and review
Reviewed:
Input that changes the meaning of an SQL query. Parameterised queries and appropriate permissions are key defences; stripping selected characters is insufficient.
Reviewed: