Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

What do you call the "token" thing?
You know how some sites have links that run on tokens? Tokens are links that only stay alive for a c

Mass activity scheduling
Hi experts,

Im facing some problems to deal with mass activity jobs.
When I run some

A little help in c#
i am doing a simple paint program using c# i want to draw with the mouse so i wrote the code of the

Inserting a check in checkbox from array value
Hello all,
I have a bit of code that works for a select option box, but does not work for my chec

please fix the error
What is the error in the below code ???
Line number On/Off | Expand/Contract <?php

How a counter of users ? such as ---> (231 Viewing)
I want to count how many users are actually viewing the page, How is that possible?
Thank you guy

CHECK A STRING FOR ' " ' (DOUBLE QUOTES)
I am checking for delimiter (.!?) and if there is a " after a sentence then it should neglect a

this code is strange !
Hi i got this code from the web.. It checks for live and dead socks
It is working perfectly on my

Displaying Column Names
I have a question regarding the ability to show the column names from my table/query.
What I'm lo

php/mysql problem
Hey all,

Problem: im trying to setup a shop where people can use a drop-down list to select t