No Picture

SQL Injection in Stored Procedure & Preventing from the same

September 30, 2009 Dhiraj Ranka 0

Following is the small example of creating a stored procedure. ==================================================================== CREATE PROC sp_login (@loginid nvarchar(25),@password nvarchar(25)) AS DECLARE @SQLString VARCHAR(500) DECLARE @loginid VARCHAR(64) DECLARE @password VARCHAR(64) /* Build the [more]