Do hard-to-guess SQL database table and column names help prevent SQL injection? [closed]
No.
His thinking goes "If the attacker doesn't know the name of my tables, then the attacker can't mess with them." However, you're still vulnerable to SQL injection, and the attacker can still cause arbitrary system calls, perhaps to well-known system tables. What if he adds some SQL code that causes very long queries against a system table that bogs down your server?
Security through obscurity is no security at all.
_this, _ here has no relation to security ,with that it can be vulnerable
Good read