代码改变世界

随笔档案-2008年5月27日

Stop SQL Injection Attacks Before They Stop You

2008-05-27 18:15 by Zhuang miao, 809 阅读, 收藏,
摘要: Armed with advanced server-side technologies like ASP.NET and powerful database servers such as Microsoft® SQL Server™, developers are able to create dynamic, data-driven Web sites with incredible ease. But the power of ASP.NET and SQL can easily be used against you by hackers mounting an all-too-common class of attack—the SQL injection attack. The basic idea behind a SQL injection attack is this: you create a Web page that allows the user to enter text into a textbox that will be used to ex 阅读全文