SQL Injection attack prevention: Macros?
SQL Injection attack prevention: Macros?
I use :parameters in queries to prevent SQL injection attacks. Do &Macros have similar injection protection?
-
DemetrionQ
- Devart Team
- Posts: 271
- Joined: Wed 23 Jan 2013 11:21
Re: SQL Injection attack prevention: Macros?
Hello.
A macro doesn't protect from SQL Injection attack, as the SQL query text is modified at the client-side by replacing the macro with the specified text. And the generated SQL query is sent to the server. You can find more detailed information about macros work in the "Macros" article of the MyDAC Help.
A macro doesn't protect from SQL Injection attack, as the SQL query text is modified at the client-side by replacing the macro with the specified text. And the generated SQL query is sent to the server. You can find more detailed information about macros work in the "Macros" article of the MyDAC Help.