Problem solve Get help with specific problems with your technologies, process and projects.

ODBC vs. SQL*Net security

A software application I am reviewing uses ODBC to connect to an Oracle (or SQL Server) database. Someone mentioned to me before, that ODBC is not as secure as SQL*Net. Is this true? Are there any other implications of using ODBC connectivity I should be aware of? Can you direct me to any documentation on this?
For Oracle, ODBC is just a layer on top of SQL*Net. All of Oracle's ODBC drivers just translate the ODBC calls made by the application into OCI calls that are transported to the database server via SQL*Net. I'm not sure that there are any additional security concerns surrounding ODBC, but there certainly are some performance issues that you may encounter. If you can avoid ODBC completely, that's the best thing. If you must use ODBC, I would highly recommend using Oracle's ODBC drivers (available for download at http://otn.oracle.com/software/tech/windows/odbc/index.html) instead of any other vendor's ODBC drivers (i.e. Microsoft, Merant, etc.).
This was last published in April 2004

Dig Deeper on Oracle database security

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.