Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

b+ tree
Hi
can every body help me about b+ tree ?(insert & delete)

update sql when refresh - php
hi
I have made a table (attachement)

the users can update the sql database using + or x bu

value not going in data base
hello friends....
i am having a working javascript....when i am selecting any

Ten Operator Syntax
Hi Guys,

I can't figure out why i am getting a parse error with this basic ten op code:

PHP and SMS
Hi all forum members. I am new here and am unsure what category shoild I post this in.
Moderator

onclick problem
I have <input type="text" name="message">
<a href=page2.

Display certain image depending on time of year
Hi, I am new to these forums and would really appreciate some advice on a piece of coding I have don

My query is being run with no results.
I have this.

Code: function DropUser($duser_id, $user_email, $user_username) {

Developing Ajax-enabled ASP.Net applications for the iPhone
I would like to develop Ajax web applications using Visual Studio that are optimized for the iPhone.

Beginners syntax and loop questions - help please!
Hi everyone,

I have some problems with php code. I'm currently in the middle of learning php,