Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Convert array to string and write to csv file
I am looking to write a MySQL query to a csv file.

At the minute I:

check for the orig

New to Arrays
Hi I am new to PHP (a week and a half now) and I am just beginning to read about arrays. I understan

Undefined variables
hi
----------------------------------------------------------------------------------------------

ImageCreate()
When I create an image and add text to it I want my text to be replaced with a PNG image, because th

Something like an INI editor or a DelimitedText-Editor
Hi all,

Am very, very, very new to PHP and not sure if I should be posting this to a Javascri

returning data from an ssh2_exec()
here's what i got.


$conn = ssh2_connect($this->_host);
ssh2_auth_password($c

$_FILES array
Ok,

I just started experimenting with PHP today. My goal right now is to have people be able

PHP using IF to display error
i have a MySQL query and i want to display 1 thing only if the number of affected rows is >=1

Need help in Generating Combinations
Need help generating all possible combination of names in an array

Lets say i have the follow

SMTP server...
I recently found a tutorial online on SMTP authentification for sending emails from webpages, here i