Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

gmdate() - want 1 hr before time
Hi,
I am using php gmdate().
Now I am entering all dates in my dbase using gmdate("Y-m-d

Convert .fdf to .pdf
I currently have a web form that uploads the form data to an .fdf file and emails it.

However

Calling variables
I want to call this to my website but it doesn't display what I want it to,

Code: <h5&

Need help urgant
why down my code ony return one item instead of all the items selected.

$arr = array($date,$

Question about ShowWindow()
Hello....

I'm struggling with sumpin, and I hope y'all can help.

I've got a CFormView

Members Only
Hi all, for my website i have a members area only which on members can veiw, but at the moment anyon

md5 is it unique
I know this is most likely one of many simple questions that can be found semi easily. But I'm press

pass form variables straight to email, no database required?
hello all,

im working on this form...

http://www.adobedayevents.com/project_request/pr

timed header image rotation
I have a joomla site and I was trying to setup a rotating image based on timing NOT just refreshing

Need Reporting Advice
My SQL server doesn't support MS SQL reporting services that comes with SQL Enterprise or Express. T