From my basic understanding of how this works, the big thing is not todynamically build the SQL statements. Do not do:
Has anyone using CGIDEV2 implemented a solution to prevent SQL Injection
attacks in your applications? If so, what did you use and how did you
This is one of my security goals for this year in case you're curious.
North American Lighting, Inc.
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact