Let's talk about Dynamic SQL (preamble)
I want to talk about how dynamic SQL is affected by the execution context, but as this is a huge and broad topic I am going to divide this topic into multiple parts and write different posts for each one of them, focusing in one aspect of dynamic SQL at a time.
- Dynamic SQL & SQL injection.
- Dynamic SQL & EXECUTE AS
- Dynamic SQL & module signatures
I hope you will find the subsequent posts useful.
Comments
- Anonymous
July 24, 2007
D-SQLInjection & DSQL_Talk things you need to consider and take care, just caught my eye recently