开发者

Are there safety concerns using a web method to write to a database?

Title is a pretty good indicator of my problem. Is there security concerns using Jquery to fire a web method to update a database? Are there reasons I should be doing all my database logic server side aft开发者_如何学运维er a post?

Thanks


As long as you follow best practices (validate the input, prevent SQL injection and so on; check the link, it's good reading), this should not be any more dangerous than any other web based interface that ends up doing work in the database.


IMHO there is no such problem. After all you jQuery calls will get to the server side at one point and you are still going to validate the input data,right?


You should still make the same authorization checks as you normally would. There's also the same chance of N hits to your web method as there would be if someone kept reposting a form.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜