Sep 18
French, Shelane prepared statements
Sep 18, 2014; 15:27
French, Shelane
prepared statements
Does anyone have this old TotW?
http://www.omnipilot.com/TotW.1768.9185.lasso
An email about it was posted Sep 8, 2006 but I can't find this article on
the new LassoSoft site.
I have just completed a SANS class, and thanks to Bil Corry and my
experiences over the last several years, I have already been doing the
secure coding practices that were mentioned in the class except for
prepared statements. Now, the only thing I have used -SQL for in an inline
is where I have a select statement that involves joins. Since inline
cannot account for that. Those SQL statements are built dynamically based
sometimes on user input. I do encode_sql, and I will add the back tick
protection in as well, encode_like (for protecting against user entered %
on a like statement) and casting expected integer values.
I have just started getting into Lasso 9 and have not look into what
security measures are in place with Ke's DS tag, but I plan to look at
that as well.
Thoughts?
#############################################################
Attend the Lasso Developer Conference 2014!
October 1-3, 2014 at Treefrog HQ, Newmarket, Ontario, Canada
http://www.lassosoft.com/LDC-newmarket-2014
#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>
Sep 18
Jonathan Guthrie Re: prepared statements
Sep 18, 2014; 11:34
Jonathan Guthrie
Re: prepared statements
Sep 18
Tom Brown, Liberty Wines RE: prepared statements
Sep 18, 2014; 15:40
Tom Brown, Liberty Wines
RE: prepared statements
Sep 18
Jonathan Guthrie Re: prepared statements
Sep 18, 2014; 11:47
Jonathan Guthrie
Re: prepared statements
Sep 18
French, Shelane Re: prepared statements
Sep 18, 2014; 15:49
French, Shelane
Re: prepared statements
Sep 18
Tom Brown, Liberty Wines RE: prepared statements
Sep 18, 2014; 15:59
Tom Brown, Liberty Wines
RE: prepared statements
Sep 18
Jonathan Guthrie Re: prepared statements
Sep 18, 2014; 12:00
Jonathan Guthrie
Re: prepared statements