RE: SQL Injection

2010-03-18 Thread adam pinder
: user@struts.apache.org > Subject: RE: SQL Injection > Date: Thu, 18 Mar 2010 12:34:57 + > > Hello, > As far as I know there is nothing in struts to prevent SQL injection. And > that should be done at the database level, so it is not related to Struts. > > Also there is no s

RE: SQL Injection

2010-03-18 Thread Gustavo Felisberto
Hello, As far as I know there is nothing in struts to prevent SQL injection. And that should be done at the database level, so it is not related to Struts. Also there is no simple way of making parameters "sql injection safe". You can take a look at http://www.owasp.org/index.php/SQL_Injection_Pre