TableAdapters SQL Injection

后端 未结 4 1371
一个人的身影
一个人的身影 2021-01-21 16:34

Hi I am using a dataset and in that dataset I have a table adapter. In my table adapters I have used stored procedures as queries. If I use the following lines to insert form

4条回答
  •  不思量自难忘°
    2021-01-21 16:59

    short answer: Yes :)

    Update 1: Even if you didn't use stored procedure and defined queries with parameters on the adapter, it would be safe against sql injection i.e. select f1, f2 where f3 = @myparameter ... that would use a prepared query.

提交回复
热议问题