Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Output Buffering question
Hi all,

I've been trying to wrap my head around output buffering. So far I've found tons of

SAP BCS. BPS
Hi all,

I am seeking reading note on the following in BW

BCS, BPS
ADVANCE

Cant display mysql data
Hey all,

I am learning php and my first goal is to create a simple CMS. At the moment I am st

image upload, resize THEN submit form
Ok so I have a form that requires the user to upload an image, and then do something with that image

my sql select id and then update problem.
I need to select some auto incremented ids out of a database and then use those id in a where statem

Retrieving innerHTML with cURL?
Hey all (sorry I know I'm a leecher, but I soon won't be. This is my first PHP project, but not my l

Need help in Generating Combinations
Need help generating all possible combination of names in an array

Lets say i have the follow

Select question
Hi,

First I would like to say that php is pretty new for me..
so please don't shoot me if

Reduce redundancies in switch functions?
Hello all! I somewhat new to PHP, and was wondering if anyone could give some suggestions on a swit

php/xmlrpc class issue
I am working on xml-rpc in php to start with.

I have a class that only has variables defined