Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Using real time in php
I'm very average at PHP and im looking to introduce time to something on my site.
Its a sports si

COde for a Cc
I'm not receiving $ft as a Cc. Why is that??

$to = "$email";
$headers = "Fr

Simple program to copy files between two computers over the web
I use logmein free and often need to move files between my two computers. Generally, I move the file

Web Application Recipe
Hi Guys!

I am working with the Web Application recipes. I am currently working on the sen

New Login Script
Hi all, i attempted to create a whole new login script witch isnt working for some reason i dont kno

Regarding accessing SQL query issued by any user in Oracle 10g
Hi all,
i want to know the queries issued by various users accessing a database...

session variable problem
Session variable is not working in Fire fox i am getting null value but it is working fine in IE.

same querie, or a new one??
Hi guys,

I'm still working on this drop down list. I've got the actual drop down list to wor

ImageCreate()
When I create an image and add text to it I want my text to be replaced with a PNG image, because th

Convert Binary String to Decimal
Trying to Get:
Decimal: 305419896

Out of:
Binary String: xV4