Massive SQL injection attack making the rounds—694K URLs so far

Re:Massive SQL injection attack making the rounds—694K URLs ... by vsync on Friday April 01, 2011 @12:16PM (#2396818)

1. Don't hand-write boilerplate SQL but use a library (CLSQL, JPA) where possible.

2. Use parameterized queries rather than pasting strings together.

3. There is no step 3. Seriously, it's not hard.

[ Parent | on HN ]

There are no comments on this comment yet.