[COLUG] Postgres / Python

[Brian Miller]

Mark Erbaugh wrote:

> 
> Thanks.  Is there a good reference to the various SQL injection
> techniques and how to avoid them?
> 

The Internet Storm Center just had a couple of posts on this very 
subject.  The first link contains some asp function code to sanitize 
input.  And the last link is about some information MS released 
(including some software written by HP) that helps check for vulnerable 
code.

http://isc.sans.org/diary.html?storyid=4615

http://isc.incidents.org/diary.html?storyid=4610

http://isc.incidents.org/diary.html?storyid=4621