Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

need help in update query
i create a form for update. there are 8 columns in my mysql table. on my main page all the data is r

confused between ' ' and " "
there is a php i set:
$begin_date_query = mysql_query( "SELECT SUBDATE(due_date, INTERVAL $d

Help! refer to a friend script with captcha code
Hi guys, I am posting on here in desperate need for some help with an ongoing search I have been doi

Open link with largest int string first
I have the following links i would like to open either all at once or one-by-one. How would i procee

Need help adding a timestamp to my filename/variable
Hello,

I'm kind of stupid when it comes to php and I need a tiny bit of help. I've got a f

problem with php server update from mid 2009
Hi,

I have this navigation menu on 2 websites which used to work just fine. After a recent up

Display search result
Hi!

I have a SQL database with information about albums and track (music).

This is wh

database design
Hi,

I got a page which allow candidate to type in their previous working experience,
I let

Date Question
I'm using the TIMESTAMP() function within mysql to set the date/time for certain events. However, ho

delete comma
HI,

How to delete "," at the end of the string.
Code: $match = 2009/02/03/a2corr