Geo___ Posted January 30, 2022 Report Share Posted January 30, 2022 Explicați cum se evita sql injection prin metoda add to value .Multumesc Quote Link to comment Share on other sites More sharing options...
yoyois Posted January 30, 2022 Report Share Posted January 30, 2022 Ce inseamna petru tine "metoda add to value"? Si de ce suna asta ca tema pe care o ai de facut la cursul "Baze de date"? In general esenta evitarii injectiei SQL e sa folosesti prepared statements. E o idee rea sa permiti user-input sa fie interpretat ca si cod. Prepared statements rezolva esenta problemei prin separarea "fizica" a codului si a datelor. 4 Quote Link to comment Share on other sites More sharing options...
Nytro Posted January 30, 2022 Report Share Posted January 30, 2022 5 hours ago, yoyois said: In general esenta evitarii injectiei SQL e sa folosesti prepared statements. E o idee rea sa permiti user-input sa fie interpretat ca si cod. Prepared statements rezolva esenta problemei prin separarea "fizica" a codului si a datelor. Corect. Unii mai sugereaza procedurile stocate dar nu va luati dupa ei. Quote Link to comment Share on other sites More sharing options...
