Re: [GENERAL] ISO guidelines/strategies to guard injection attacks

2010-01-22 Thread Andy Colson
On 1/21/2010 3:53 PM, Kynn Jones wrote: On Tue, Jan 19, 2010 at 4:49 PM, Andy Colson mailto:a...@squeakycode.net>> wrote: On 1/19/2010 3:39 PM, Andy Colson wrote: On 1/19/2010 3:23 PM, Kynn Jones wrote: I have a Perl CGI script (using DBD::Pg) that interfaces with a

Re: [GENERAL] ISO guidelines/strategies to guard injection attacks

2010-01-21 Thread Kynn Jones
On Tue, Jan 19, 2010 at 4:49 PM, Andy Colson wrote: > On 1/19/2010 3:39 PM, Andy Colson wrote: > >> On 1/19/2010 3:23 PM, Kynn Jones wrote: >> >>> I have a Perl CGI script (using DBD::Pg) that interfaces with a >>> server-side Pg database. I'm looking for general >>> guidelines/tools/strategies t

Re: [GENERAL] ISO guidelines/strategies to guard injection attacks

2010-01-19 Thread Andy Colson
On 1/19/2010 3:39 PM, Andy Colson wrote: On 1/19/2010 3:23 PM, Kynn Jones wrote: I have a Perl CGI script (using DBD::Pg) that interfaces with a server-side Pg database. I'm looking for general guidelines/tools/strategies that will help me guard against SQL injection attacks. Any pointers/sugge

Re: [GENERAL] ISO guidelines/strategies to guard injection attacks

2010-01-19 Thread Andy Colson
On 1/19/2010 3:23 PM, Kynn Jones wrote: I have a Perl CGI script (using DBD::Pg) that interfaces with a server-side Pg database. I'm looking for general guidelines/tools/strategies that will help me guard against SQL injection attacks. Any pointers/suggestions would be much appreciated. ~K