Parameterized Command Interface

From OWASP

Jump to: navigation, search
This article is a stub. You can help OWASP by expanding it.

This template will categorize articles that include it into the Category:Stub category.

A parameterized command interface is used as an alternative to a string-based command interface. This type of interface prevents Injection attacks by keeping parameters separate from the command itself.

Examples of parameterized command interfaces include:

  • PreparedStatement in Java
Retrieved from "http://www.owasp.org/index.php/Parameterized_Command_Interface"
Personal tools