Why Learn It? Glossary
 

6. Designing Code Immune to SQL Injections

Previous previous|next Next Page

SQL injection is not simply a matter of poor coding. Poor application design can lead to "designed in" vulnerabilities where there are no coding problems as such and everything works as intended.

You must design your code such that it is (ideally) entirely free of SQL injection vulnerabilities, or contains measures that mitigate the impact of a successful attack.

Identify the primary code design considerations for eliminating SQL injection vulnerabilities

Explain techniques for mitigating the effects of SQL injection attacks