Sample Header Ad - 728x90

Do stored procedures prevent SQL injection?

89 votes
6 answers
13996 views
Is it true that stored procedures prevent SQL injection attacks against PostgreSQL databases? I did a little research and found out that SQL Server, Oracle and MySQL are not safe against SQL injection even if we only use stored procedures. However, this problem does not exist in PostgreSQL. Does the stored procedure implementation in PostgreSQL core prevent SQL injection attacks or is it something else? Or is PostgreSQL also susceptible to SQL injection even if we only use stored procedures? If so, please show me an example (e.g. book, site, paper, etc).
Asked by Am1rr3zA (1523 rep)
Jan 4, 2011, 07:24 AM
Last activity: Jun 21, 2021, 08:54 AM