Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Click counter to ignore traffic from search bots
I have a click counter on my site that...well, counts the number of clicks a link gets on the frontp

Not adding to db
Hi, I can't figure out why it won't add the record to the database. It's just a simple form to get

Multiple includes losing variables
Hey all,

just starting out w php and ran into a problem pretty quickly. I'm
including seve

pspell
using pspell, is it possible to get words that would be best in the current phrase?

For examp

Lack of simpleXML Documentation
What is up with this.

Look at: http://www.php.net/manual/en/function.simplexml-load-file.php<

Can you help please? Php file
I have to write this php file to allow users to register their nicknames on nickserv

For an I

How to ask a regex question?
Hi, I thought I'd share some of my insight after seeing too many bad questions that either get ignor

Significance of BPM
Hi Experts,
I am a novice in BPM , I just want to know how BPM as permenant department is

quotes changing
hi all

in my content

opening quotes " changes to “

close qu

grouping within a foreach?
hello all,

I currently have a list of products spit out from my db via a foreach loop. Right