This method removes the potential for an SQL injection attack.
这种方法消除了SQL注入攻击的可能性。
In an SQL injection attack, a program creates an SQL command and sends it to an SQL interpreter.
在SQL注入攻击中，程序会创建一个SQL命令，并将其发送给SQL解释器。
The focus of this article is a specific type of code injection attack: the Blind XPath injection.
本文主要介绍代码注入攻击的一种特殊类型：XPath盲注。
An emerging threat, first outlined by Amit Klein in a paper in 2004, is the blind XPath injection attack (see Resources).
最近开始出现的一种威胁(最初由AmitKlein于2004年在一篇论文中概述)是XPath盲注攻击(请参阅参考资料)。
Like the SQL injection attack, you can often easily deal with the threat if you follow best practices to develop secure applications.
与SQL注入攻击类似，如果使用最佳实践开发安全的应用程序，通常可以轻松地处理该威胁。
ISR (Instruction Set Randomization) is a new, general approach for safeguarding systems against any type of code-injection attack.
指令表随机化(isr)技术是一种新型的保护系统免遭任何类型注入码攻击的通用方法。
Any application that queries a database using user-entered data, including Windows Forms applications is a potential target of an injection attack.
使用用户输入的数据查询数据库的任何应用程序(包括Windows窗体应用程序)都是Injection攻击的潜在目标。
A connection string injection attack can occur when dynamic string concatenation is used to build connection strings that are based on user input.
当使用动态字符串串联根据用户输入生成连接字符串时，可能发生连接字符串注入式攻击。
While it's easy to point to one or two key measures for the prevention of the SQL injection attack, it's best to take a layered approach to the problem.
尽管采取一两项关键措施预防SQLInjection攻击是很容易的，但最好是对问题采用分层方法。
Blind SQL injection attacks are a well know and recognized form of code injection attack, but there are many other forms, some not so well documented or understood.
SQL盲注攻击是一种为人熟知的代码注入攻击形式，但是也有很多其他形式，有些尚未得到很好的记载和了解。
The basic idea behind a SQL injection attack is this: you create a Web page that allows the user to enter text into a textbox that will be used to execute a query against a database.
SQLInjection攻击的基本原理如下：您创建一个网页，允许用户向文本框中输入文本，用于对数据库执行查询。
Perhaps the most malicious form of injection attack is code injection—placing new code into the memory space of the running process and then directing the running process to execute it.
最恶劣的注入攻击形式也许是代码注入——将新代码置入正在运行的进程的内存空间，随后指示正在运行的进程执行这些代码。
This attack functions almost exactly like the blind SQL injection attack but, unlike SQL injection attacks, few people know about XPath injection attacks or take precautions against them.
这种攻击的运作跟SQL盲注攻击几乎完全相似，与SQL注入攻击不同的是，几乎没什么人了解XPath盲注攻击或对其进行预防。
Parameterized commands guard against a SQL injection attack by guaranteeing that values received from an external source are passed as values only, and not part of the SQL statement.
参数化的命令会借由保证从外部来源接收的值只以数值传递，而不以SQL陈述式传递，以防范SQL投射攻击。
In this article, the author explains the principle and process of SQL Injection Attack, and introduces a serial interrelated solution to prevent SQL Injection Attack from the aspect of code in detail.
介绍了SQL注入攻击原理，SQL注入攻击的过程，并从功能代码本身方面详细介绍了SQL注入攻击的防范措施。
In this article, the author explains the principle and process of SQL Injection Attack, and introduces a serial interrelated solution to prevent SQL Injection Attack from the aspect of code in detail.
介绍了SQL注入攻击原理，SQL注入攻击的过程，并从功能代码本身方面详细介绍了SQL注入攻击的防范措施。
应用推荐