PASS Summit 2026 Kommt in Drei Städte|Jetzt registrieren

Topic: SQL Code Analysis

All products
All databases
All levels

SQL Prompt logo

The risks of using EXECUTE ('SQL Script')

SQL Prompt’s code analysis rule, BP013, will alert you to use of Execute(string) to execute a batch in a string, often assembled dynamically from user input. This technique is dangerous because the parameter values are injected before the statement is parsed by SQL Server, allowing an attacker to "tag on"… Read more