Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

help with multi-update
Now sure how to ask this really....
10g database if that matters.

I have a customer

Inserting into MySQL Newbie
Hi ive got a slight problem where ive made a simple web form where the customer inserts the ammount

with clause
hi all, i have a big query that usually access the same table more than once. for example, i have s

I need desperate help with this php code integrated with flash please
Can someone please help me with this php code which I have been stuck on for weeks . I am trying to

Why is this function returning a false value when it shouldn't be??
This is in an include file. I want it to check a value in an html form and see if it's just white s

email CODING Problem
Email coding problem.

I need to send a section of the info to $tf and the same as a Cc to $em

Auto install
Hi I have a directory lets say "apps" that I then have more folders ie "email",

iterating through an array and escape each value independently.
I have a set up where the variable being escaped is an array and it needs to be iterated and escaped

xml element exists
Code: [Select]<?xml version="1.0"?>
<Addresses>
<

Else statement screws up all css
Does anyone know what goes wrong in the process with this php code?
This code seems to be causing