Tag Archives: sql injection

SQL Injection is still a big issue…

I just thought I’d pass on this story…
One of my friends has been running an Internet business for many years. It started as an ASP website against an Access database. At the time Access didn’t support bind variables, so all the SQL was written using literals concatenated into the SQL. This didn’t present much of [...]