In windows application what should prefer -
Stored procedure or Inline query (Means query written in application)
Loading
Know the answer? Post it — somebody with the same question will find it here.
Sign in to answer this question
It is the same account you read, post and publish with — and you will come straight back to this page.
RobbinsonPosted Oct 21, 2013, 1:52 AM
Hi,
SQL injection is general issue not depending on any technology. in .NET technology use SqlParameter to prevent from Sql Injection instead of string concatations of parameters.
How sql injection possioble in Winform, please refer below blog.
http://www.c-sharpcorner.com/Blogs/11794/
Jignesh TrivediPosted Oct 21, 2013, 1:40 AM
I think yes SQl injection is alos possible with windows application...
Ravi ShekharPosted Oct 19, 2013, 7:41 AM
Ravi ShekharPosted Oct 19, 2013, 7:39 AM
Jignesh TrivediPosted Oct 18, 2013, 5:47 AM
Store procedure is help us to prevent SQL injection atteck.
please refer
http://docs.oracle.com/cd/F49540_01/DOC/java.815/a64686/01_intr3.htm
RobbinsonPosted Oct 18, 2013, 5:44 AM
I think this is duplicate thread
http://www.c-sharpcorner.com/Forums/Thread/235111/
yes stored procedure is better than inline query... SP has their own advantages like it prevent SQL injection, reduce n/w traffic ect...
hope this will help you.