How can I close this Configuration review point 'Sanitize Database and Application User Input '

Question

How can I close this Configuration review point 'Sanitize Database and Application User Input '

Srinivas Syamala 20

How we can close this configuration review point on Sanitize Database and Application User Input can you please guide me to close

Olaf Helper 47,616 Reputation points

2024-02-02T06:57:26.7333333+00:00

I don't understand a single word of your post, "where" you are (which application) and what the problem is. You have to provide much more detailed information.
Srinivas Syamala 20 Reputation points

2024-02-02T07:18:11.17+00:00
we have some audit points in that above is the one point for that they provide below recommendation. The following steps can be taken to remediate SQL injection vulnerabilities:

Review TSQL and application code for SQL Injection

Only permit minimally privileged accounts to send user input to the server

Minimize the risk of SQL injection attack by using parameterized commands and stored procedures

Reject user input containing binary data, escape sequences, and comment characters

Always validate user input and do not use it directly to build SQL statements How can i check and close Audit point.
Olaf Helper 47,616 Reputation points

2024-02-02T09:27:43.8+00:00

Still unclear, what you are talking about.

1 answer

Your answer

Olaf Helper 47,616 Reputation points

2024-02-02T06:57:26.7333333+00:00

I don't understand a single word of your post, "where" you are (which application) and what the problem is. You have to provide much more detailed information.
Srinivas Syamala 20 Reputation points

2024-02-02T07:18:11.17+00:00

we have some audit points in that above is the one point for that they provide below recommendation. The following steps can be taken to remediate SQL injection vulnerabilities:

Review TSQL and application code for SQL Injection

Only permit minimally privileged accounts to send user input to the server

Minimize the risk of SQL injection attack by using parameterized commands and stored procedures

Reject user input containing binary data, escape sequences, and comment characters

Always validate user input and do not use it directly to build SQL statements How can i check and close Audit point.
Olaf Helper 47,616 Reputation points

2024-02-02T09:27:43.8+00:00

Still unclear, what you are talking about.

Answer 1

Erland Sommarskog 134.1K MVP Volunteer Moderator

we have some audit points in that above is the one point for that they provide below recommendation. The following steps can be taken to remediate SQL injection vulnerabilities:

There are some very good pieces of advice in that list that you absolutely should follow.

How can i check and close Audit point.

First of all, make sure that you understand the points in the list. If you don't, I recommend that you read the first three chapters in my article about dynamic SQL: https://www.sommarskog.se/dynamic_sql.html.

0 comments

Share via

How can I close this Configuration review point 'Sanitize Database and Application User Input '

1 answer

Your answer