...
/Putting It All Together for a Robust Defense
Putting It All Together for a Robust Defense
A thorough defense against SQL injection can be built with all the defenses we've learnt so far.
We'll cover the following...
Layers of defenses
Adding database permissions to the widespread use of stored procedures leaves us with a layered defense that can serve as a model for how we want to defend other parts of our system. We start by defending as much as we can with a nearly bulletproof defense like prepared statements. We then expand the scope of our defense with ongoing diligent development. Finally, we minimize the impact of development mistakes with the one-time application of a broadly ...