Thursday, June 10, 2004

SQL used for evil

Make sure you protect your web-site from SQL injection kids. This one would be nasty to debug:

CREATE TRIGGER tr_Orders_INSERT_InsteadOf ON Orders
INSTEAD OF INSERT
AS RAISEERROR('[Microsoft OLE DB Provider for SQL Server] Timeout expired',16,0)

No comments:

Post a Comment