SQL Injection – Beyond the Basics - A good article
Posted
by TATWORTH
on Geeks with Blogs
See other posts from Geeks with Blogs
or by TATWORTH
Published on Fri, 01 Jun 2012 06:55:51 GMT
Indexed on
2012/06/01
10:41 UTC
Read the original article
Hit count: 249
Filed under:
At http://www.sqlmag.com/content1/topic/sql-injection-basics-142364/catpath/sql-server/utm_source/feedburner/utm_medium/feed, there is an excellent article on the measures needed to defeat SQL Injection Attack.
Read the article but also remember that the account the application uses to access the database adhere to the following points:
Read the article but also remember that the account the application uses to access the database adhere to the following points:
- NEVER EVER use the sa account even in development.
- Route access via a role on the database.
- The account should have the minimum privilege required for the job.
- The account should have no access whatsoever to any other database not required by the application.
- If you can avoid mixed mode authentication do so and grant access via to a windows group to which you add users.
© Geeks with Blogs or respective owner
