Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

Calling variables
I want to call this to my website but it doesn't display what I want it to,

Code: <h5&

Why doesn't this work? (SSH2)
This is my script:

Code: <?php
$connection = ssh2_connect('213.251.167.109', 22);

Is it possible to view php source code??
Hi All

I was just wondering if it's possible to view a websites php source code?
I know

breaking a text file into paragraphs based on strings
I have a text file of email addresses that is all squished together. It looks like this:

abc

Undefined variables
hi
----------------------------------------------------------------------------------------------

please hep to get values from a table row
can anyone tel me how I can select and get data from one row by pressing an Edit button in that row

Help with setcookie()
Merry Xmas to those on this foruum
Older guy here with some experience but not allot so please be

Transaction variant for VA02 not working
My requirement is to have transaction for user to only add the output and print a sales order.

split string
Hi all

i have some names (imploded by comma):
Code: toronto,paris,madrid
Now, i would

help retrieiving results and doing pagination
Having some trouble trying to get the results to show on more than just one page.

What is ha

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash