Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Handling text changed in text box control using Ajax
I need to create a web form with a text box control. When someone types text into the textbox I nee

is_dir() problem
Hello,

I'm buidling a php scripts that dynamically get's subfolders from a specific folder.

I would like "for" to wait 5 sec
I would like my 'for' loop to wait 5 sec before second iteration.


for ($i=0; $i<10

Help on code output
My CODE:

Code: [Select] echo "<phone>".$line["phone"].&qu

From Header Showing 'Unkown' In Hotmail? Why?
Code: $to = $row_GetID['email_addr'].',sales@mywebaddress.co.uk';
$subject = 'Thank you for you

[newb] Image hosting help.
Hey there, I'm new to php, I know some basics and i can code PWN, I'm only 14 but I'm interested in

Using real time in php
I'm very average at PHP and im looking to introduce time to something on my site.
Its a sports si

article site help remaining text
Hi all hope you will be fine
I am creating a article site in this site i want to put some text on

Linked Keywords
I am trying to get a script that makes my predefined keyword converted to links and / or converted t

does anyone know a php script to send mail using gmails/googles free smtp server
cause i heard u can do that but i dont know how