Ask the Expert

ODBC vs. SQL*Net security

A software application I am reviewing uses ODBC to connect to an Oracle (or SQL Server) database. Someone mentioned to me before, that ODBC is not as secure as SQL*Net. Is this true? Are there any other implications of using ODBC connectivity I should be aware of? Can you direct me to any documentation on this?

    Requires Free Membership to View

For Oracle, ODBC is just a layer on top of SQL*Net. All of Oracle's ODBC drivers just translate the ODBC calls made by the application into OCI calls that are transported to the database server via SQL*Net. I'm not sure that there are any additional security concerns surrounding ODBC, but there certainly are some performance issues that you may encounter. If you can avoid ODBC completely, that's the best thing. If you must use ODBC, I would highly recommend using Oracle's ODBC drivers (available for download at http://otn.oracle.com/software/tech/windows/odbc/index.html) instead of any other vendor's ODBC drivers (i.e. Microsoft, Merant, etc.).

This was first published in April 2004

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: