6. Designing Code Immune to SQL Injections |
||||||||
SQL injection is not simply a matter of poor coding. Poor application design can lead to "designed in" vulnerabilities where there are no coding problems as such and everything works as intended. You must design your code such that it is (ideally) entirely free of SQL injection vulnerabilities, or contains measures that mitigate the impact of a successful attack.
|