Let's look at how we can reduce our chances of getting attacked:
- We can begin to mitigate from the impact of an attack by making sure that that all excess database privileges are denied and that disclosure is for end users only
- Deflect from constructing dynamic SQLs with linked input values as they allow the easiest access for SQL injections
- Bind arguments eliminate the possibility of SQL injections and enhance performance
- Filter and sanitize input
- Have a set of defined rules for syntax, length, and type
- Use type-safe SQL parameters for data access
- Eliminate all procedures that are not in use