...

/

Putting It All Together for a Robust Defense

Putting It All Together for a Robust Defense

A thorough defense against SQL injection can be built with all the defenses we've learnt so far.

Layers of defenses

Adding database permissions to the widespread use of stored procedures leaves us with a layered defense that can serve as a model for how we want to defend other parts of our system. We start by defending as much as we can with a nearly bulletproof defense like prepared statements. We then expand the scope of our defense with ongoing diligent development. Finally, we minimize the impact of development mistakes with the one-time application of a broadly ...