LINQ和SQL注入

Question

可能重复:
使用LINQ to SQL有助于防止SQL注入

我正在使用LINQ来访问sql db.以下代码是否安全？

 var addRec = (from p in db.5544
                          where p.ID == newAddID
                          select p).Single();

            addRec.Address1 = comAddTxt1.Text;                                                                             //create address record
            addRec.Address2 = comAddTxt2.Text;
            addRec.Address3 = comAddTxt3.Text;
            addRec.Address4 = comAddTxt4.Text;
            addRec.PostCode = pstCdeTxt.Text;
            addRec.Town = twnTxt.Text;
            addRec.County = cntyTxt.Text;
            addRec.Country = cntComBox.SelectedItem.Text;

            db.SubmitChanges();

谢谢,

Answer 1

是的,SQL注入攻击是安全的.

不,它可能不安全于其他形式的攻击,即:跨站点脚本等,相关的.