Re: Precautions against "SQL Injection"?

Graham Leggett <[email protected]> Wed, 16 Sep 2009 11:10:51 +0200

Newsgroups	gmane.comp.jakarta.turbine.torque.user
Message-ID	<[email protected]>

Markus Müller wrote:

> are there any precautions against  SQL Injection?

My understanding is that all SQL statements generated either use
prepared statements, or their arguments are escaped as per the
database's requirements.

If torque allowed sql injection, that would be a major security flaw.

Regards,
Graham
--

smime.p7s (application/x-pkcs7-signature, 3.2 KB) - not displayed