Skip to content Skip to sidebar Skip to footer

Is It Possible To Execute Multiple Statements In A Single Query Using Dbd::oracle?

I'd like to know if it's possible to execute more than one SQL statement within a single execute() or do() call using DBD::Oracle via Perl DBI. Example: # Multiple SQL statements

Solution 1:

If there is a successful SQL injection attack, couldn't the attacker simply repeat it and run multiple statements that way as well?

Oracle supports anonymous PL/SQL blocks which can contain multiple statements.

"begin execute immediate 'drop table customers'; execute immediate 'drop table sales'; end"

Oracle provides a free tutorial on avoiding SQL injection attacks here: http://st-curriculum.oracle.com/tutorial/SQLInjection/index.htm

Post a Comment for "Is It Possible To Execute Multiple Statements In A Single Query Using Dbd::oracle?"