Following what sounds like good security advice I've been looking to upgrade my websites to use stored procedures.
I've been fine with my present supplier (who claims to have MySQL 4 AND 5 available) while I used MySQL 4, either straight or with prepared statements. With increased usage and concern for security I started to convert to MySQL 5, only to discover that suppliers MySQL 5 doesn't allow stored procedure access. For me this defeats the purpose of using MySQL 5, so I am considering the options.
Can anyone recommend a hosting company (preferably UK based) that offers a modest reseller package on a MS server that supports MySQL5 with stored procedure access? or is there some other method available in MySQL 4 without the tedious process of using prepared statements on an 'ad hoc' basis? Is there any other simple and reliable methods to resist SQL injection attacks (without the horrible kludgey escape sequence methods)?
Or am I sweating over nothing?
________________________________________________________________
If you want to get the best response to a question, please check out FAQ222-2244 first.
'If we're supposed to work in Hex, why have we only got A fingers?'
Drive a Steam Roller
I've been fine with my present supplier (who claims to have MySQL 4 AND 5 available) while I used MySQL 4, either straight or with prepared statements. With increased usage and concern for security I started to convert to MySQL 5, only to discover that suppliers MySQL 5 doesn't allow stored procedure access. For me this defeats the purpose of using MySQL 5, so I am considering the options.
Can anyone recommend a hosting company (preferably UK based) that offers a modest reseller package on a MS server that supports MySQL5 with stored procedure access? or is there some other method available in MySQL 4 without the tedious process of using prepared statements on an 'ad hoc' basis? Is there any other simple and reliable methods to resist SQL injection attacks (without the horrible kludgey escape sequence methods)?
Or am I sweating over nothing?
________________________________________________________________
If you want to get the best response to a question, please check out FAQ222-2244 first.
'If we're supposed to work in Hex, why have we only got A fingers?'
Drive a Steam Roller