CON.10.A9 Protection Against SQL Injections (B)

If data is passed to a database management system (DBMS), Developers MUST use stored procedures or prepared SQL statements. If data is passed to a DBMS and neither stored procedures nor prepared SQL statements are supported by the operational environment, SQL queries MUST be secured separately.

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

3. Regulamentos relacionados

Pedidos ligados

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)