Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Mailing Lists -> Oracle-L -> SQL Injection Concern
We've got a table listing stored programs that need to execute after
various application activity. My first thought is to just use "execute
immediate" on the stored program. But this will allow anyone to insert a
row into our table and execute arbitrary code. I'm interested in any
suggestions or solutions you've implemented to tighten up security in such a
situation.
Thanks,
Jon Knight
Senior Database Analyst
2525 Horizon Lake Drive, Suite 120
Memphis, TN 38133
JKnight_at_concordefs.com
901.371.8000 - Phone 800.238.7675 - Phone 901.380.8336 - Fax www.FirstData.com
-- http://www.freelists.org/webpage/oracle-lReceived on Mon Jan 10 2005 - 10:31:38 CST