Re: MS Access db as backend

Absolutely. Not a bit of dynamic sql in sight! :-)
(they use parameters - no concatenation to create sql statements)

zz12 wrote:
Are both link samples good enough to use in preventing sql injection?

Thanks for your speedy reply Bob. Much appreciated.


"Bob Barrows [MVP]" <reb01501@xxxxxxxxxxxxxxx> wrote in message
news:%23ByCBvl9HHA.5948@xxxxxxxxxxxxxxxxxxxxxxx
zz12 wrote:
Hello. Could anyone post or point me to somewhere that has a sample
model of a best practice for using .asp page to insert, select,
delete, update to an MS Access database? Stored Procedures I know
are the way to go for SQL Server but I heard parameterized Access
queries (saved Access queries or sql sommand code) were the
equivalent and if so what does the code look like?
Thanks in advance.

There's not much to it:

http://www.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&selm=e6lLVvOcDHA.1204%40TK2MSFTNGP12.phx.gbl

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&selm=eHYxOyvaDHA.4020%40tk2msftngp13.phx.gbl

--
Microsoft MVP - ASP/ASP.NET
Please reply to the newsgroup. This email account is my spam trap so
I don't check it very often. If you must reply off-line, then remove
the "NO SPAM"

--
Microsoft MVP - ASP/ASP.NET
Please reply to the newsgroup. This email account is my spam trap so I
don't check it very often. If you must reply off-line, then remove the
"NO SPAM"


.

Relevant Pages

  • Re: Multi-step OLE DB operation generated errors
    ... I think the reason it hasn't solved is that this database has the ... Doesinterbaseprovide a trace tool like MS SQL Server's Profiler? ... Please reply to the newsgroup. ... This email account is my spam trap so ...
    (microsoft.public.data.ado)
  • Re: Problem w/ VBScript running against SQL Server 2000
    ... but bayID is always assigned the value of bay_id. ... account for sql injection anyway. ... This email account is my spam trap so I ...
    (microsoft.public.scripting.vbscript)
  • Re: Issue with retrieving large data over web using Stored Procedu
    ... other improvements I could do at the ASP page? ... how do I go about analyzing a stored procedure with selecting ... Is there any tool in the SQL Profiler that analyze each Trace? ... This email account is my spam trap ...
    (microsoft.public.inetserver.asp.db)
  • Re: 80040e14 Unclosed quotation mark
    ... > The following error is generated when I run the code underneath. ... > trying to write a guid from a session variable to a SQL table. ... This email account is my spam trap so I ...
    (microsoft.public.inetserver.asp.db)
  • Re: Different results in SQL and Access
    ... do you mean using a recordset to loop through and select your ... Or do you mean using ADO to execute your sql queries (which would certainly ... This email account is my spam trap so I ...
    (microsoft.public.access.queries)