This post originated from an RSS feed registered with .NET Buzz
by Robert Hurlbut.
Original Post: Advanced Data Access with ADO.NET and Oracle
Feed Title: Robert Hurlbut's .Net Blog
Feed URL: http://www.asp.net/err404.htm?aspxerrorpath=/rhurlbut/Rss.aspx
Feed Description: Development with .Net, Rotor, Distributed Architectures, Security, Extreme Programming, and Databases
While the article is good in showing you various advanced techniques, I have a general question. Does anyone else notice most of the examples, in the way the SQL command text is written, are vulnerable to SQL Injection (yes, it can be done with Oracle too!)?
Learn the techniques, but still practice secure, safe coding!