diff options
| author | Vincent Deffontaines <gryzor@apache.org> | 2013-01-06 18:52:43 +0100 |
|---|---|---|
| committer | Vincent Deffontaines <gryzor@apache.org> | 2013-01-06 18:52:43 +0100 |
| commit | 5c23f52166cd5e2aa348ec9006bf137fd6bea7fb (patch) | |
| tree | 21c7013fa75ee50721ef099ce9891b56695afa7e /docs/manual/mod/mod_authn_dbd.xml | |
| parent | According top my testing 'SSL_SESSION_id2sz' is 4x faster with the use 'ap_bi... (diff) | |
| download | apache2-5c23f52166cd5e2aa348ec9006bf137fd6bea7fb.tar.xz apache2-5c23f52166cd5e2aa348ec9006bf137fd6bea7fb.zip | |
Security notes about SQL injection.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1429560 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/manual/mod/mod_authn_dbd.xml')
| -rw-r--r-- | docs/manual/mod/mod_authn_dbd.xml | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/docs/manual/mod/mod_authn_dbd.xml b/docs/manual/mod/mod_authn_dbd.xml index 7c27191426..9eda1bf208 100644 --- a/docs/manual/mod/mod_authn_dbd.xml +++ b/docs/manual/mod/mod_authn_dbd.xml @@ -123,11 +123,11 @@ configuration required in some web applications. <section id="security"> <title>Preventing SQL injections</title> - <p>It depends on what DBD driver and backend you use. With most - drivers you don't have to do anything : the statement is prepared - by the database at startup, and user input is used only as data. - But you may need to untaint your input. At the time of writing, - the only driver that requires you to take care is FreeTDS.</p> + <p>Whether you need to care about SQL security depends on what DBD driver + and backend you use. With most drivers you don't have to do anything : + the statement is prepared by the database at startup, and user input is + used only as data. But you may need to untaint your input. At the time + of writing, the only driver that requires you to take care is FreeTDS.</p> <p>Please read <module>mod_dbd</module> documentation for more information about security on this scope.</p> </section> |