SQL Injection Precautions in CF

[Limca]

Dear friends

I am interested to know precautionary measures in CF to prevent SQL Injection attacks, Kindly provide the required information.

Warm Regards.
Limca Guy

[Muhammad Haris]

Try to use clean codes and make sure you know a lot about SQL!

[techguru]

Here are few things I would do...

1. remove all embed sql statements... use stored procedures where ever possible..

2. have validations on all the fields and limit the lenght depending on the database tables.

3. keep range validator all the time on accepted values.

[Limca]

techguru

Thanks for the useful information regarding precautionary measures to prevent SQL Injection Attack. I will make sure to follow your recommended steps. I hope these will protect my code from unwarranted and malicious inputs.

Thanks again

[ashlee]

The precautions for sql injection in cold fusion are as under :

1. Limit use access.

2. Use function like stripquotes.

3. Remove culprit characters from sequences.

4. Use killchars function.

5. Limit the length of the user input.

6. Use Post instead of Get while submitting forms.

Hope so that would helpful..

Thanks
Ashlee