Google up "sql injection" This should bring up a whole bunch of security sites.
Basic guidelines.
1 - Create a user with extremely limited permissions. (some places only allow them to run specific packages or procedures)
2 - Use parameterized queries. (sql injection docs describe why very well)
Cover those two and you are already more secure then A LOT of others...
Basic guidelines.
1 - Create a user with extremely limited permissions. (some places only allow them to run specific packages or procedures)
2 - Use parameterized queries. (sql injection docs describe why very well)
Cover those two and you are already more secure then A LOT of others...