This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Parameterized Command Interface"
From OWASP
| Line 7: | Line 7: | ||
[[Category:Countermeasure]] | [[Category:Countermeasure]] | ||
| + | [[Category: Control]] | ||
Revision as of 11:32, 21 September 2008
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
A parameterized command interface is used as an alternative to a string-based command interface. This type of interface prevents Injection attacks by keeping parameters separate from the command itself.
Examples of parameterized command interfaces include:
- PreparedStatement in Java
