这种方法消除了SQL注入攻击的可能性。
This method removes the potential for an SQL injection attack.
比如没有讨论XPath注入攻击的危险性。
For example, it does not discuss the danger of XPath injection attacks.
示例1注入攻击。
SQL注入攻击是一个可能会损害高价值站点的漏洞。
SQL injection attacks are a vulnerability that tend to hurt high-value sites.
SQL注入攻击是另一种输入验证上的漏洞。
SQL injection vulnerabilities are yet another class of input validation flaws.
本文主要介绍代码注入攻击的一种特殊类型：XPath盲注。
The focus of this article is a specific type of code injection attack: the Blind XPath injection.
这些预防方法中，多数也可以类似地应用于预防其他类型的代码注入攻击。
Not surprisingly most of these preventative methods are the same methods you can and should use to prevent other typical code injection attacks.
这样做可使SQL更加易于维护，且可使您的应用程序免受SQL注入攻击。
Doing so makes the SQL easier to maintain and secures your application from SQL injection attacks.
因此，针对SQL注入攻击的防范技术研究具有重要的现实意义。
Therefore, it is of important practical significance to have study on preventive technology of SQL injection.
在SQL注入攻击中，程序会创建一个SQL命令，并将其发送给SQL解释器。
In an SQL injection attack, a program creates an SQL command and sends it to an SQL interpreter.
问题在于这样就会对安全性问题（例如XPath注入攻击）大开方便之门。
The problem is that this leaves the door wide open to security issues, such as XPath injection attacks.
在SQL注入攻击中，Mallory找到Alice创建来售电的一个Web站点。
In an SQL injection attack, Mallory finds a Web site that Alice has created to sell electronics.
可编辑数据验证——为了去除跨站点脚本和SQL注入攻击，HDIV分析所有的可编辑数据域。
Editable Data Validation - HDIV analyzes all editable fields to remove cross-site scripting and SQL injection attacks.
遵守良好的安全最佳实践不仅能够帮助您预防XPath注入攻击，而且可以预防其他形式的攻击。
Following good security best practices will help you protect yourself not only from XPath injection attacks but other forms of attacks as well.
通过对d - Y攻击者模型研究，可知注入攻击是攻击者实现其攻击目标的必要手段。
It is concluded that the inject attack is the necessary method for D-Y attacker to get its aim.
与SQL注入攻击类似，如果使用最佳实践开发安全的应用程序，通常可以轻松地处理该威胁。
Like the SQL injection attack, you can often easily deal with the threat if you follow best practices to develop secure applications.
SQL盲注攻击是一种为人熟知的代码注入攻击形式，但是也有很多其他形式，有些尚未得到很好的记载和了解。
Blind SQL injection attacks are a well know and recognized form of code injection attack, but there are many other forms, some not so well documented or understood.
如果用户能够将SQL代码直接传递给应用程序，此代码将在一个查询中执行，那么就可能发生SQL注入攻击。
A SQL injection vulnerability occurs when a user is able to pass SQL code directly to the application in such a way that the code will be executed in a query.
目前的很多黑客攻击手段，如钓鱼攻击、SQL注入攻击等各种网络攻击方式都是由身份认证开始的。
Forever, many hackers attack means, such as phishing and SQL injection attacks, start from the identity authentication.
如果一位粗心大意的开发人员输入了清单5中的文本(以便直接嵌入值)，这个调用将面临SQL注入攻击的风险。
If a less-than-careful developer entered the text from Listing 5 (in the hopes of embedding the values directly), the call would be exposed to SQL injection attacks.
最恶劣的注入攻击形式也许是代码注入——将新代码置入正在运行的进程的内存空间，随后指示正在运行的进程执行这些代码。
Perhaps the most malicious form of injection attack is code injection—placing new code into the memory space of the running process and then directing the running process to execute it.
本发明的有益效果：本发明不仅可以检测常见的SQL注入攻击的检测技术，同时具备低误告警、高侦查率的特点。
The beneficial effects of the present invention are that the invention can not only detect common SQL injection aggression, also has low alarm by mistake and high detection rate and the like.
介绍了SQL注入攻击原理，SQL注入攻击的过程，并从功能代码本身方面详细介绍了SQL注入攻击的防范措施。
In this article, the author explains the principle and process of SQL Injection Attack, and introduces a serial interrelated solution to prevent SQL Injection Attack from the aspect of code in detail.
多数使用XML的应用程序不易受到XPath注入攻击，不应该只是因为发现了一个特殊的漏洞就认为XML应用程序风险更大。
Most applications that use XML will not be vulnerable to XPath injection attacks and XML applications should not be considered more at risk just because a specific vulnerability is found.
这种攻击的运作跟SQL盲注攻击几乎完全相似，与SQL注入攻击不同的是，几乎没什么人了解XPath盲注攻击或对其进行预防。
This attack functions almost exactly like the blind SQL injection attack but, unlike SQL injection attacks, few people know about XPath injection attacks or take precautions against them.
Rubyon Rails有许多聪明的helper方法，例如防止注入攻击的方法，这让sql注入变成了困难的事情。
Ruby on Rails has some clever helper methods, for example against SQL injection, so that this is hardly a problem.
DB 2on Rails的这个新版本添加了一层额外的安全性，这要归功于这样一个事实：这些“安全”调用将转换为参数化查询，而参数化查询对SQL注入攻击免疫。
This new edition of DB2 on Rails adds an extra layer of security, thanks to the fact that these "safe" calls are translated into parameterized queries, which are immune to SQL Injection attacks.
Jacob对其中的一些弱点给出了示例，像跨站点脚本攻击(XSS)、跨站点伪造请求(CSRF)、HTTP响应分割、会话固定攻击以及SQL注入攻击等等。
Jacob gave examples of some of the vulnerabilities like Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), HTTP Response Splitting, Session Fixation, and SQL Injection.
大多数开发人员听说过关于反模式的一个很好的例子：结构化查询语言（Structured Query Language，SQL）的错误使用导致Web站点受到 SQL 注入攻击。
Most developers have heard of a good example of an anti-pattern: The improper use of Structured Query Language (SQL) libraries that result in SQL injection attacks on Web sites.
应用推荐