Closed zspitz closed 5 years ago
Microsoft Access can make use of the standard data access libraries available from any COM environment, and the techniques for avoiding SQL injection in these libraries also apply.
However, Access also allows referencing form and report values directly, as well as creating a global identifier / variable which can be used in SQL in many Access contexts as described here; these can also be used to avoid SQL injection.
Microsoft Access can make use of the standard data access libraries available from any COM environment, and the techniques for avoiding SQL injection in these libraries also apply.
However, Access also allows referencing form and report values directly, as well as creating a global identifier / variable which can be used in SQL in many Access contexts as described here; these can also be used to avoid SQL injection.