#sql injection prevention

Sql Injection Prevention System Abstract SQL injection attack is widely used by attackers to gain unauthorized access to systems. This software system is developed to prevent unauthorized access to system using SQL injection attacks. This is done by adding unique value and a signature based authentication technique to verify authenticity. SQL injection is a major security issue these days that…

Comparing Statement vs PreparedStatement in java

Statement vs PreparedStatement

  PreparedStatement is a subclass of Statement.   Similar to Statements, we can use a PreparedStatement to run SQL statements against database.   Here are the differences between them :  

Efficiency

  When a statement is executed, the JDBC driver compiles the SQL statement before sending it to database.   If we have multiple similar statements, the same process of…

SQL injection is a technique where malicious users can inject the SQL commands /queries into an SQL statement, resulting in false input of the web page and the security of a web application.

Eventually CakePhp already protects the application against the SQL Injection if you are using the CakePhp's methods like find() and save() and proper array notation (ie. array('field' => $value))

Still, it is sometimes necessary to perform manual queries, which can be done with Model::Query.

- Read the full Blog at: Protecting Your CakePhp Application Against SQL Injection

Our Php questions and answers forum is developed for those tech geeks who don’t want to wait for a longer duration of time, as the community members within FindNerd can answer any android query within shortest possible time frame.