Prevent SQL injection in applications.
防止应用程序中的SQL注入。
This method removes the potential for an SQL injection attack.
这种方法消除了SQL注入攻击的可能性。
SQL injection is still one of the most common types of an injection flaw.
SQL注入仍然是最常见的一种注入缺陷。
SQL injection attacks are a vulnerability that tend to hurt high-value sites.
SQL注入攻击是一个可能会损害高价值站点的漏洞。
SQL injection attacks can also be used to change data or damage the database.
SQL Injection攻击还可用于更改数据或损坏数据库。
SQL injection vulnerabilities are yet another class of input validation flaws.
SQL注入攻击是另一种输入验证上的漏洞。
This removes the need to do preparation at runtime and can reduce SQL injection risk.
这样就无需在运行时执行准备工作，且可以减少SQL注入风险。
In an SQL injection attack, a program creates an SQL command and sends it to an SQL interpreter.
在SQL注入攻击中，程序会创建一个SQL命令，并将其发送给SQL解释器。
Doing so makes the SQL easier to maintain and secures your application from SQL injection attacks.
这样做可使SQL更加易于维护，且可使您的应用程序免受SQL注入攻击。
Therefore, it is of important practical significance to have study on preventive technology of SQL injection.
因此，针对SQL注入攻击的防范技术研究具有重要的现实意义。
Editable Data Validation - HDIV analyzes all editable fields to remove cross-site scripting and SQL injection attacks.
可编辑数据验证——为了去除跨站点脚本和SQL注入攻击，HDIV分析所有的可编辑数据域。
It can be said that as long as people are still writing database applications, SQL injection vulnerability will always exist.
可以说，只要人类还在编写数据库应用，SQL注入漏洞就会一直存在。
SQL injection is the second most popular vulnerability, primarily because of the growing dependence Web sites have on databases.
SQL注入是第二个最流行的漏洞，这主要是因为Web站点对数据库的依赖性日益增加。
SQL injection is essentially the same problem as the shell meta-character one, but with an SQL interpreter instead of the shell.
SQL注入本质上与shell元字符的问题是相同的，不过它是由SQL解释器进行解释的，而不是由shell进行解释的。
Although this example demonstrates an SQL injection in its simplest form, you can see just how easy it is for an attacker to use.
尽管本例以最简单的形式演示了一个SQL注入，但是您可以看出攻击者利用SQL注入有多么容易。
Like the SQL injection attack, you can often easily deal with the threat if you follow best practices to develop secure applications.
与SQL注入攻击类似，如果使用最佳实践开发安全的应用程序，通常可以轻松地处理该威胁。
Many intrusion vulnerabilities such as SQL injection, CSRF, and XSS are preventable using a comprehensive input-validation framework.
如果使用一个综合的输入验证框架，许多输入漏洞，如SQL注入、CSRF和XSS，都是可以避免的。
By keeping the code server side, you reduce the risk of any malicious activity through cross-site scripting, SQL injection, and so on.
通过将代码放在服务器端，减少了通过跨站点脚本、SQL注入等手段进行恶意活动的风险。
The main way: password loophole attack, SQL Server extended stored procedure attack, SQL Injection (SQL Injection), steals backup, etc.
主要手法有：口令漏洞攻击、SQLServer扩展存储过程攻击、SQL注入(SQL Injection)、窃取备份等。
In addition to the overflow exploits, SQL injection is one other type of attack that relies on developer oversight by not testing incoming data.
除了溢出的利用以外，SQL注入是另一类依赖于开发人员没测试输入数据的疏漏的攻击。
Like the last example, the page is ripe for SQL injection attacks because the executed SQL is constructed dynamically from a user-entered value.
与上一示例一样，此页也会受到SQL Injection攻击，因为执行的SQL是通过用户输入的值动态构造的。
By supporting parameterized statements, you exploit the advanced features provided by these, like access path reuse and SQL injection prevention.
由于支持参数化语句，您可以利用这种语句提供的高级特性，例如访问路径重用和SQL注入预防。
Max shows in this use case that Flume tackles problems well beyond known vulnerability types (buffer overrun, cross-site scripting and SQL injection).
Max以此用例说明Flume能解决的问题远不止已知的缺陷类型(缓冲区溢出、跨站脚本以及SQL注入)。
While not directly related to SQL injection attacks, BestLogin.aspx demonstrates another security best practice: the encryption of connection strings.
虽然不与SQL Injection攻击直接相关，但是 BestLogin.aspx演示了另一种安全最佳做法：对连接字符串进行加密。
While it's easy to point to one or two key measures for the prevention of the SQL injection attack, it's best to take a layered approach to the problem.
尽管采取一两项关键措施预防SQL Injection攻击是很容易的，但最好是对问题采用分层方法。
An attacker may use directory traversal and cross-site ccripting during a scan phase and then hit it with an SQL injection or an RFI in the exploit phase.
在扫描阶段，攻击者可能会利用路径遍历和跨站点脚本；在攻击阶段，黑客可能会利用SQL注入或远程文件包含进行攻击。
A SQL injection vulnerability occurs when a user is able to pass SQL code directly to the application in such a way that the code will be executed in a query.
如果用户能够将SQL代码直接传递给应用程序，此代码将在一个查询中执行，那么就可能发生SQL注入攻击。
Blind SQL injection attacks are a well know and recognized form of code injection attack, but there are many other forms, some not so well documented or understood.
SQL盲注攻击是一种为人熟知的代码注入攻击形式，但是也有很多其他形式，有些尚未得到很好的记载和了解。
If a less-than-careful developer entered the text from Listing 5 (in the hopes of embedding the values directly), the call would be exposed to SQL injection attacks.
如果一位粗心大意的开发人员输入了清单5中的文本(以便直接嵌入值)，这个调用将面临SQL注入攻击的风险。
SQL injection attacks are a serious concern for application developers as they can be used to break into supposedly secure systems and steal, alter, or destroy data.
SQL Injection攻击与应用程序开发人员紧密相关，因为它们可用于侵入据推测是安全的系统并窃取、更改或销毁数据。
应用推荐