Follow me on TwitterNot too long ago, I blogged about importance of getting developers to code parametrized queries instead of using literal values in SQL queries. In this post I urged every DBA to forward an article that talked about SQL injection attacks to their developers. Well, it would not have helped any to send this article to a Ruby on Rails developer because Ruby on Rails does not support parametrized queries. I should say “did not support till today”. Today IBM delivered version 2.0 of the Rails adapter for DB2 and the key future of this new version is support for parametrized [...]
|
|||||
|
|
I think that every Database Administrator needs to read the article “Opinion: No more excuses for SQL injection attacks” and send it out to every application developer they know. I hate SPAM as much as the next guy but I think it is justified in this case. I am dead serious. |
|
|||
|
Copyright © 2010 FreeDB2.com - All Rights Reserved |
|||||
