This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Parameterized Command Interface"
From OWASP
Deleted user (talk | contribs) |
|||
| Line 1: | Line 1: | ||
| + | http://www.texteltdelrel.com | ||
{{Template:Stub}} | {{Template:Stub}} | ||
Revision as of 17:50, 22 May 2009
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
A parameterized command interface is used as an alternative to a string-based command interface. This type of interface prevents Injection attacks by keeping parameters separate from the command itself.
Examples of parameterized command interfaces include:
- PreparedStatement in Java
