Need Suggestion about Stored Procedure

Question

In windows application what should prefer - Stored procedure or Inline query (Means query written in application)

Robbinson · Answer

Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable{mso-style-name:Table Normal;mso-tstyle-rowband-size:0;mso-tstyle-colband-size:0;mso-style-noshow:yes;mso-style-priority:99;mso-style-parent:;mso-padding-alt:0in 5.4pt 0in 5.4pt;mso-para-margin:0in;mso-para-margin-bottom:.0001pt;mso-pagination:widow-orphan;font-size:10.0pt;font-family:Times New Romanserif;} Hi SQL injection is general issue not depending on any technology. in .NET technology use SqlParameter to prevent from Sql Injection instead of string concatations of parameters. How sql injection possioble in Winform please refer below blog. http://www.c-sharpcorner.com/Blogs/11794/

Jignesh Trivedi · Answer

hi I think yes SQl injection is alos possible with windows application...

Ravi Shekhar · Answer

Sql injection attack in Windows apps ??? Is it possible??

Ravi Shekhar · Answer

Yeah this is a duplicate thread. But Here i am talking about only windows application.In my last question i did not got any answer related to windows application

Jignesh Trivedi · Answer

yes agree with Tejas Store procedure is help us to prevent SQL injection atteck. please refer http://docs.oracle.com/cd/F49540_01/DOC/java.815/a64686/01_intr3.htm

Robbinson · Answer

hi I think this is duplicate thread http://www.c-sharpcorner.com/Forums/Thread/235111/ yes stored procedure is better than inline query... SP has their own advantages like it prevent SQL injection reduce n/w traffic ect... hope this will help you.