I know that in MySQL
we can quote identifiers with back tick symbol, whereas in Oracle
(and other RDBMS that follow standard) we can use double quotes around table names and field names. I wonder whether it somehow improves security and should we use this technique in real world applications in parallel with traditional methods like preparation of sql statements?
Aucun commentaire:
Enregistrer un commentaire