Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Cannot Connect to Database
I am writing an application to do annual reviews. I cannot get my script to work. Whenever it runs I

Multiple websites question.
Hi, does php have any functionality that enables a programmer to extract information from a website

how to remove in php string display
My code is

$message="We're looking at developing our website.";

$body= "

php mailer
How can i send a mail to large no, say 50,000 reciepients using [color=#0000FF]php mailer[/color]

PHP Search Issue
Hi, I am using the following code to search and return flights from a database. The user searches by

Help? Need help on project with templates involving mysql and php.
I'm having a hard time explaining what I want but basically here is what I have in place:

-Da

need help modifying script
Hi guys,

I'm fairly new to php and am having a bit of trouble modifying a script.

This

Create comparison matrix?
I want to create a comparison script for forum software and was wondering is there any tutorial or b

newbie question about multiple queries
hi everyone,
I'm sorry to ask such a basic question, but I'm young and trying to learn php on my

what business processes?
Hi,

A general question. What business processes (like OTC - Order to Cach, P2P, R2R etc)