What character sanitation do I need for an MS Access Pass Through Query to SQL Server
问题 I am attempting to interface MS Access with SQL Server and I want to make sure I am not vulnerable to SQL Injection attacks. I have seen suggestions to use ADO to create a paramaterized version of the queries, but I wanted to learn how to sanitize my input with a DAO pass through. At the moment I am escaping single quotations and backslashes. Are there any standard SQL Server injection sanitation methods in VBA? 回答1: Are there any standard SQL Server injection sanitation methods in VBA? Nope.