SQL Injection RRS feed

  • Question

  • Hi,

    How to find out whether my database attacked by SQL injection and any other attacks.

    Is there any Procedure to check?

    I am using SQL 2005.

    Friday, April 20, 2012 7:14 PM


  • Use only parameterized  stored procedure and avoid using dynamic sql and then you will not have  to check for SQL Injection

    Best Regards, Uri Dimant SQL Server MVP http://dimantdatabasesolutions.blogspot.com/ http://sqlblog.com/blogs/uri_dimant/

    • Marked as answer by VijayKSQL Wednesday, April 25, 2012 7:04 AM
    Sunday, April 22, 2012 7:31 AM

All replies