Safety question

[dennisGuru]

Hello,

I'm using tomcat 4.1 and mysql. In the beans I connect to the database with sql queries. Now i have heard that you do not end these queries with a ";". Because then the query can be split up and someone can access the database and, for example, delete everything.

In my jsp pages i use forms. Can someone give me some clarity about this?

Thanks in advance.

Dennis

 

[r937]

Beware SQL Injection in Web Applications

http://www.oreillynet.com/pub/wlg/1595

SQL Injection Attacks: Are You Safe?

http://www.devarticles.com/index2.php?option=content&task=view&id=138&pop=1&page=0&hide_js=1

Blindfolded SQL Injection

http://www.webcohort.com/web_applic..._papers/blindfolded_sql_server_injection.html

Blind SQL Injection (PDF)

http://www.net-security.org/dl/articles/Blind_SQLInjection.pdf

rudy