Saturday, March 27, 2010

What are the benefits of VAL?


What are the benefits of VAL?

And

why is it good for the database ?

and

why is it a security precaution?





for ex



CoID = #Val(CoID)#

What are the benefits of VAL?
Although I never heard of VAL being used for security, I
suppose it could protect your database against an attack such as
when a user inserts something like this into a numeric field that
gets stored in your database:



6; delete from customers



Your sql statement might then read: update customers set age
= 6; delete from customers where id = 10;



Where your original sql was: update customers set age = 6
where id = 10;



By using VAL, you force ''6; delete from customers'' to read
simply as ''6''

No comments:

Post a Comment