can this be done with Access?
thx

Hello,

Are you talking about access forms or ASP connecting to access? You prevent SQL injection attacks by blocking certain character sets, such as comments or additional queries appended on (union select ... ).

Brian

Oh ultimately, stored procedures is best to use, but obviously Access doesn't support this. Just in case you wanted to know.

html form theat uses asp to connect to access database...
thx

Yeah, in your ASP code, you have to write some code to block SQL injection from happening.

Intiruged, and that code would be?

SQL injections. Please correct me if I am wrong, if you are connecting with a user who has limited permisions - how much devistation can these cause?

There is so many variables (client side validation) and back end hurdles to get over (user level, table level permissions) etc - is it worth out tme worrying ababout it??

Wind is your friend
Matt