asp and ms sql stored procedures
Is this method of calling a stored procedure considered to be safe from (SQL Injection) and efficient in terms of (speed):
dim objConn,rs
sub openDB()
set objConn = Server.CreateObject("ADODB.Connection")
objConn.Open "PROVIDER=SQLOLEDB;DATA
SOURCE=127.0.0.1;UID=papa;PWD=mama;DATABASE=Mix"
end sub
sub closeDB()
objConn.Close
set objConn = nothing
end sub
openDB()
objConn.usp_InsertCustomer firstname,lastname,companyname,phone,email,passwor d,address,zip,"kl",city,country,CInt(1),Request.Se rverVariables("REMOTE_HOST")
CloseDB()
Regards
Eugene
|
