For example, it does not discuss the danger of XPath injection attacks.
比如没有讨论XPath注入攻击的危险性。
SQL injection attacks are a vulnerability that tend to hurt high-value sites.
SQL注入攻击是一个可能会损害高价值站点的漏洞。
SQL injection attacks can also be used to change data or damage the database.
SQLInjection攻击还可用于更改数据或损坏数据库。
Doing so makes the SQL easier to maintain and secures your application from SQL injection attacks.
这样做可使SQL更加易于维护，且可使您的应用程序免受SQL注入攻击。
The problem is that this leaves the door wide open to security issues, such as XPath injection attacks.
问题在于这样就会对安全性问题（例如XPath 注入攻击）大开方便之门。
Editable Data Validation - HDIV analyzes all editable fields to remove cross-site scripting and SQL injection attacks.
可编辑数据验证——为了去除跨站点脚本和SQL注入攻击，HDIV分析所有的可编辑数据域。
Following good security best practices will help you protect yourself not only from XPath injection attacks but other forms of attacks as well.
遵守良好的安全最佳实践不仅能够帮助您预防XPath注入攻击，而且可以预防其他形式的攻击。
Not surprisingly most of these preventative methods are the same methods you can and should use to prevent other typical code injection attacks.
这些预防方法中，多数也可以类似地应用于预防其他类型的代码注入攻击。
Like the last example, the page is ripe for SQL injection attacks because the executed SQL is constructed dynamically from a user-entered value.
与上一示例一样，此页也会受到SQLInjection攻击，因为执行的SQL是通过用户输入的值动态构造的。
While not directly related to SQL injection attacks, BestLogin.aspx demonstrates another security best practice: the encryption of connection strings.
虽然不与SQLInjection攻击直接相关，但是 BestLogin.aspx演示了另一种安全最佳做法：对连接字符串进行加密。
Blind SQL injection attacks are a well know and recognized form of code injection attack, but there are many other forms, some not so well documented or understood.
SQL盲注攻击是一种为人熟知的代码注入攻击形式，但是也有很多其他形式，有些尚未得到很好的记载和了解。
If a less-than-careful developer entered the text from Listing 5 (in the hopes of embedding the values directly), the call would be exposed to SQL injection attacks.
如果一位粗心大意的开发人员输入了清单5中的文本(以便直接嵌入值)，这个调用将面临SQL注入攻击的风险。
SQL injection attacks are a serious concern for application developers as they can be used to break into supposedly secure systems and steal, alter, or destroy data.
SQLInjection攻击与应用程序开发人员紧密相关，因为它们可用于侵入据推测是安全的系统并窃取、更改或销毁数据。
Most developers have heard of a good example of an anti-pattern: The improper use of Structured Query Language (SQL) libraries that result in SQL injection attacks on Web sites.
大多数开发人员听说过关于反模式的一个很好的例子：结构化查询语言（Structured Query Language，SQL）的错误使用导致Web 站点受到 SQL注入攻击。
Most applications that use XML will not be vulnerable to XPath injection attacks and XML applications should not be considered more at risk just because a specific vulnerability is found.
多数使用XML的应用程序不易受到XPath注入攻击，不应该只是因为发现了一个特殊的漏洞就认为XML应用程序风险更大。
This attack functions almost exactly like the blind SQL injection attack but, unlike SQL injection attacks, few people know about XPath injection attacks or take precautions against them.
这种攻击的运作跟SQL盲注攻击几乎完全相似，与SQL注入攻击不同的是，几乎没什么人了解XPath盲注攻击或对其进行预防。
This new edition of DB2 on Rails adds an extra layer of security, thanks to the fact that these "safe" calls are translated into parameterized queries, which are immune to SQL Injection attacks.
DB 2on Rails的这个新版本添加了一层额外的安全性，这要归功于这样一个事实：这些“安全”调用将转换为参数化查询，而参数化查询对SQL注入攻击免疫。
This new edition of DB2 on Rails adds an extra layer of security, thanks to the fact that these "safe" calls are translated into parameterized queries, which are immune to SQL Injection attacks.
DB 2on Rails的这个新版本添加了一层额外的安全性，这要归功于这样一个事实：这些“安全”调用将转换为参数化查询，而参数化查询对SQL注入攻击免疫。
应用推荐