SQL injection attacks

[freddy]

I would like to get more information on securing my windows apps from SQL
injection attacks. There is so much stuff on web apps, but I can't find info
on win apps.
Can you help me

[Jon Skeet [C# MVP]]

freddy <fr****@discussions.microsoft.com> wrote:

I would like to get more information on securing my windows apps from SQL
injection attacks. There is so much stuff on web apps, but I can't find info
on win apps.

The same kind of things apply. The main thing to do is never use values
from the user directly in SQL statements - *always* use SQL parameters
instead.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[DalePres]

There are two great pdf files on SQL injection at:

http://spilabs.com/support/whitepapers/index.html

and some more at:

http://www.appsecinc.com/techdocs/wh.../research.html

I would suggest them to any and every developer of applications using SQL
Server.

DalePres
MCAD, MCDBA, MCSE
"freddy" <fr****@discussions.microsoft.com> wrote in message
news:E2**********************************@microsof t.com...

I would like to get more information on securing my windows apps from SQL
injection attacks. There is so much stuff on web apps, but I can't find
info
on win apps.
Can you help me