SQL Injection can damage your website’s data and spread to other sites in your organization. This article explains how it works and how you can prevent it. Exploited vulnerabilities: A SQL Injection attack relies on the someone sending an HTTP request (web site visitor) being able to add SQL commands to a URL or […]
SQL Reserved word or not, that is the question
Here is a problem that we had on a recent project that we were doing maintenance on. The code had some queries with a table called as “user”. The code works fine on the production server but gave an error on our development server. The fix? Put brackets around the table name in all the […]
SQL tricks – creative JOINs with legacy data
Have you ever needed to extract data from old tables and use it in a way the table designer never planned on? This seems to be an all-too-common experience. Recently, I learned that I could parse a number out of a string field, cast it as an integer, and actually use that result in a […]
