dimanche 24 juillet 2016

Does quoting of identifiers improve security?

I know that in MySQL we can quote identifiers with back tick symbol, whereas in Oracle (and other RDBMS that follow standard) we can use double quotes around table names and field names. I wonder whether it somehow improves security and should we use this technique in real world applications in parallel with traditional methods like preparation of sql statements?

Aucun commentaire:

Enregistrer un commentaire