Pantek Library

Hosting Provided By

CybrHost

High Speed Hosting

Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection

From: Dave Aitel <dave(at)immunitysec.com>
Date: Fri Jan 03 2003 - 11:16:50 EST

Hmm, can prepared statements call stored procedures which then do their own SQL query building and reexecing? hmm.

-dave

On Fri, 3 Jan 2003 11:01:20 -0500
"Kevin Spett" <kspett@spidynamics.com> wrote:

> As far as I can tell, the JDBC spec requires that a PreparedStatement
Received on Fri Jan 3 12:35:55 2003

This message: [ Message body ]
Next message: Kevin Spett: "Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection"
In reply to Kevin Spett: "Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection"
Next in thread: Kevin Spett: "Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection"
Reply: Kevin Spett: "Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:45 EDT

Contact Us Legal Notices Order Services Online
Pantek Home Privacy Policy IT news Site Map Pantek Library