Timeline for Security issues in a SQL query and possible function?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 13, 2017 at 12:40 | history | edited | CommunityBot |
replaced http://codereview.stackexchange.com/ with https://codereview.stackexchange.com/
|
|
| Aug 14, 2014 at 15:49 | comment | added | Sifu | Thanks a lot for your advices, they are well appreciated. I added these comments for two reasons : for any future readers to understand everything (if they want to read through it) and for you to see that your answer was useful. | |
| Aug 14, 2014 at 15:34 | comment | added | RubberDuck | Whether or not to take any advice we've given is solely your decision @Sifu. Take it for what it's worth. | |
| Aug 14, 2014 at 15:34 | comment | added | Sifu | Oh! Yes, this is server side code. | |
| Aug 14, 2014 at 15:33 | comment | added | RubberDuck | Sounds like (knowingly or not) you have implemented a DAL then. Good. I wasn't sure if this was client side code or not. | |
| Aug 14, 2014 at 15:32 | comment | added | Sifu | I understand your thoughts on performance issue, though I have never mentioned speed issues for a reason, the database is extremely small (3 tables of 10*40 cells). And Access was picked for a reason of ease of modifications (we can simply open the Access file, go into the desired table and change whichever data we want. All this without any SQL knowledge, which most of my collegues don't have) | |
| Aug 14, 2014 at 15:30 | comment | added | Sifu | Thanks for the info, I will specify the datatype and size of each parameter as you suggested. || I'm not sure I understand what you mean by "where this code resides", these pieces of codes are triggered from the website (asp.net) where a client enters some information (does that help?). || The "3" was actually a typo, thanks for noticing it! It was supposed to be "4" (as in 4 columns). It really exists just to spot a mistake in the database. || (Follows in next comment, not enough characters) | |
| Aug 14, 2014 at 15:15 | history | edited | Malachi | CC BY-SA 3.0 |
changed the formatting
|
| Aug 14, 2014 at 15:13 | history | answered | RubberDuck | CC BY-SA 3.0 |