List Table/Column names in SQL database

Microsoft SQL Server 2000 provides a method for obtaining meta data using information schema views. Read the rest of this entry

Reducing the Risk of SQL Injection Attack

Databases can be compromised if they are open to SQL Injection Attack. Stripping invalid characters from form inputs will reduce this risk.

If you have a form on your site that interacts with a database (e.g. a username/password login form), you should secure the form by adding an additional stage between submission and the database look-up. One way to do this is to check for valid content. Read the rest of this entry

Using ADO and SQL with ASP

This article illustrates how you can easily connect to and manipulate SQL databases using ActiveX Data Objects (ADO) with Active Server Pages (ASP)
Read the rest of this entry