Saturday, March 27, 2010
What are the benefits of VAL?
What are the benefits of VAL?
And
why is it good for the database ?
and
why is it a security precaution?
for ex
CoID = #Val(CoID)#
What are the benefits of VAL?
Although I never heard of VAL being used for security, I
suppose it could protect your database against an attack such as
when a user inserts something like this into a numeric field that
gets stored in your database:
6; delete from customers
Your sql statement might then read: update customers set age
= 6; delete from customers where id = 10;
Where your original sql was: update customers set age = 6
where id = 10;
By using VAL, you force ''6; delete from customers'' to read
simply as ''6''
Subscribe to:
Post Comments
(Atom)
No comments:
Post a Comment