Are there any differences between MSSQL and MySQL when it comes to preventing SQL injection?

Posted by Derek Adair on Stack Overflow See other posts from Stack Overflow or by Derek Adair
Published on 2010-04-09T15:37:08Z Indexed on 2010/04/09 15:43 UTC
Read the original article Hit count: 409

Filed under:

mssql

|

php

|

sql-injection

|

security

I am used to developing in PHP/MySQL and have no experience developing with MSSQL. I've skimmed over the PHP MSSQL documentation and it looks similar to MySQLi in some of the methods I read about.

For example, with MySQL I utilize the function mysql_real_excape_string(). Is there a similar function with PHP/MSSQL?

What steps do I need to take in order to protect against SQL injection with MSSQL?

What are the differences between MSSQL and MySQL pertaining to SQL injection prevention?

© Stack Overflow or respective owner

Related posts about mssql

Fixing my SQL Directory NTFS ACLS

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
I run my development server by boot to VHD (Windows Server 2008 R2 x64). In that instance, I also have an attached VHD (I attach via script at boot up time using Task Scheduler). That VHD I have my SQL instances installed. So, the other day, acting hasty, I chmod my ACLS – wow, what a day after… >>> More
Restore Database from MSSql 2008 to MSSql 2005

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello... I have created a set of tables (around 20) in MSSql 2008 and entered around 1000 records to appropriate tables. But the issue is that I want that same tables with all the entered data into MSSql 2005 (SQLEXPRESS). Obviously it won't work by taking a backup and restore it into MSSql 2005… >>> More
Recover Data Entered in MSSql 2008 to MSSql 2005

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello... I have created a set of tables (around 20) in MSSql 2008 and entered around 1000 records to appropriate tables. But the issue is that I want that same tables with all the entered data into MSSql 2005 (SQLEXPRESS). Obviously it won't work by taking a backup and restore it into MSSql 2005… >>> More
Plans for our next milestone

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
We have seen some increase in activity with more people downloading our driver and either reporting their successes or reporting any issues they run into – for the native driver (sqlsrv_xxxx API) to the PDO driver (PDO API). We’d like to thank you all for your effort and hope that our… >>> More
SQL Server Driver for PHP 2.0 CTP2 is now released

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
digg_url = "http://blogs.msdn.com/b/sqlphp/archive/2010/06/15/sql-server-driver-for-php-2-0-ctp2-is-now-released.aspx";digg_title = "SQL Server Driver for PHP 2.0 CTP2 is now released";digg_bgcolor = "#FFFFFF";digg_skin = "normal"; digg_url = undefined;digg_title… >>> More

Related posts about php

Magento, NGINX, PHP-FPM, APC, MEMCACHED, 16gb Ram CentOS, Spiking PHP-FPM to 100% CPU

as seen on Server Fault - Search for 'Server Fault'
I have been trying to resolve my issue of spiking cpu caused by php-fpm processes. I've reduced the php-fpm config settings to: pm = ondemand pm.max_children = 12 pm.start_servers = 2 pm.min_spare_servers = 2 pm.max_spare_servers = 10 pm.max_requests = 500 php_admin_value[memory_limit] = 128M Problem… >>> More
PHP Pear Installation on CentOS

as seen on Server Fault - Search for 'Server Fault'
[root@ip ~]# yum install php-pear* Reducing CentOS-5 Testing to included packages only Finished Setting up Install Process Package 1:php-pear-1.8.1-2.el5.centos.noarch already installed and latest versio … >>> More
Apache configurations for php "AddType text/html php" or "AddType application/x-httpd-php php .php"

as seen on Server Fault - Search for 'Server Fault'
I am taking over an application server and discover that it contain the following settings: AddType text/html php Although it works, but my understanding is that it should set as following: AddType application/x-httpd-php php .php What are the key differences between the two settings?… >>> More
mod_rewrite settings causes server to throw HTTP 500 errors instead of 404

as seen on Server Fault - Search for 'Server Fault'
Hello. I have a server with VBulletin forum (working under Apache 2.2, CentOS). The default settings for it in .htaccess are as follows: RewriteEngine on RewriteCond %{HTTP_HOST} ^gsmforum\.ru RewriteRule (.*) http://www.gsmforum.ru/$1 [R=301,L] # If you are having problems or are using VirtualDocumentRoot… >>> More
Problems installing Memcache (PECL extension)

as seen on Server Fault - Search for 'Server Fault'
I have installed memcached fine, and now I will need to install PECL extension memcache. Im running RedHat x86_64 es5. The installation gives me this: downloading memcache-2.2.6.tgz ... Starting to download memcache-2.2.6.tgz (35,957 bytes) ..........done: 35,957 bytes 11 source files, building running:… >>> More