Am I immune to SQL injections if I use stored procedures?

前端 未结 7 927
别那么骄傲
别那么骄傲 2020-12-09 09:36

Lets say on MySQL database (if it matters).

7条回答
  •  死守一世寂寞
    2020-12-09 09:48

    It depends what your stored procs do. If they dynamically generate SQL based on their parameters, and then execute that SQL, then you're still vulnerable. Otherwise, you're far more likely to be fine - but I hesitate to sound 100% confident!

提交回复
热议问题