Inspired? No home

SQL used for evil

Make sure you protect your web-site from SQL injection kids. This one would be nasty to debug:

CREATE TRIGGER tr_Orders_INSERT_InsteadOf ON Orders
INSTEAD OF INSERT
AS RAISEERROR('[Microsoft OLE DB Provider for SQL Server] Timeout expired',16,0)

Written on 10 June 2004.
blog comments powered by Disqus