Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

whats wrong with my code please help!!!
this is the error


Warning: mysql_close(): supplied argument is not a valid MySQL-Link res

Including calander to page - will not show other months than current??
im trying to add an existaing calander onto a profile page by using Code: <?php include "

Insert Failing.
Hey,
I am making a Sign up page for a website, but the insert query into the Database does not se

Force download script not handling files with spaces properly
I have a regular old php force download script, uses this code:

Code: header("Cache-Cont

extending tidy
I have problem with type-hinting and extending tidy. This code creates error:
Code: class cMyTidy

Undefined offset
The following script checks to see if the user answer matches the correct answer.

Form Fiel

Inserting into MySQL Newbie
Hi ive got a slight problem where ive made a simple web form where the customer inserts the ammount

how to transport the Query and insfoset
Hi

I have created the query using SQ01........
How to created T-code for query..

Change Age automatically
hi guys . im new to php , is it possible to change age value in mysql automatically when year change

Replacing a string on click of a button
Hi! Is there a way to replace a string on a click of a text link?

This is what I've come up w