"Gerry Hickman" <gerry666uk@newsgroup.nospam> wrote in message
news:OIF63SKzHHA.4928@TK2MSFTNGP03.phx.gbl...
> Hi,
>
>> Wow! Thanks for the info. But then this could happen regardless whether I
>> use ColdFusion or .net - correct?
>
> You mean the SQL injection and hacking? Yes, it can happen on all types of
> programming that allow users to submit text strings against SQL databases.
>
> A good way to deal with it is to use stored procedures and also make sure
> you set up database security properly.
>
> There's an article here that may help:
>
>
http://en.wikipedia.org/wiki/SQL_injection >
>> "Gerry Hickman" <gerry666uk@newsgroup.nospam> wrote in message
>> news:%23s1q06kyHHA.4476@TK2MSFTNGP06.phx.gbl...
>>> Hi wipeout64@hotmail.com,
>>>
>>>> RE: Open ended select statements - This is his exact wording, but I'm
>>>> not sure what he's talking about as I'm not familiar with web
>>>> programming:
>>> This isn't to do with "web programming", it's to do with SQL databases
>>> and as Mark says above, it sounds dangerous because they may be able to
>>> feed bits of SQL into your web forms, thereby hacking into your server.
>>>
>>>> Things like mismatched columns make SQL joins impossible and orphaned
>>>> rows break the required RI
>>>> (referential integrity). We tried to normalize the DB so that we could
>>>> leverage the .Net20 tools but were unable to do so.
>>> OK, well basically you have to re-design it so that it complies with
>>> referential integrity. However, you can still use fuzzy logic to do
>>> look-ups and queries.
>>>
>>> This is nothing to do with .NET, this is to do with good database
>>> design.
>>>
>>> You probably need to post your question and design to one of the
>>> database newsgroups and CC it to the FoxPro group - they'll be able to
>>> help you migrate it to mySQL or SQL Server. I don't think Visual Studio
>>> can help you with this until you fix the database.
>>>
>>> --
>>> Gerry Hickman (London UK)
>>
>>
>
>
> --
> Gerry Hickman (London UK)