Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Unable to retreve the values from Mysql Query
Hi,

Here is the php code that I have, Query is running properly in phpmyadmin and is resu

Losing 'page' data
I have this code that allows me to update my database. But after updating, I lose the $_GET['page']

Comparing MySql data and arrays.
I have a mysql table set up like this:
idsubjectbodyuseriddatetimetags1blog subjectblog body111|2

pull content
I have an existing page, domain/adverts.php which has a good PR. I've just rebuilt my site and the n

how do I show what a user have selected from a checkbox?
From my code below, how would i show which check boxes have been checked and which radio buttons sel

Must be a string? Huh, what? HELP?
with the following script, I get
Fatal error: Property name must be a string in /home/content/e/

How to read CSS message data
Hi,
I have a requirement here. When working as a Dev angel for multiple customers its really di

WELCOME SCREEN
first of all let me tell you what does my script do,

it´s a very simple query to show a e

simple php table loop
Hi all,

I've the following code

<?php // Create category options

Posting Serialized Data Not Working
I am trying to send an object from one PHP file to another using POST. I serialize the object and th