Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

insert PHP code into function
Hi,
I'm having problems when trying following:

I have:
Code: [Select]createBar("Do

Best way to read this text file.
Hi.I am planning to make a small application in C# to convert the players from Football manager 2010

Parse Error Help
Hello, I got the parse error "Parse error: syntax error, unexpected ',' in register.php on line

The page should be expire when cilck back button
hi,
i'm new to php world.
i create user registration page.
when i submit it,data goes to my

Seperate team from score
I am writing a site that does a NFL Pick 'em type application and I have a feed that gives me the sc

getting weird error..
okay, I'm getting an error on this particular function, something about the syntax in the mysql LIMI

WORDPRESS - Multiple Loops Only Going to One Post?
I have various pages with multiple loops and i need them to be individual to all other categories.

extending tidy
I have problem with type-hinting and extending tidy. This code creates error:
Code: class cMyTidy

Creating Images from images in PHP
Okay well I am trying to make a 'dynamic' calender image with PHP.

I have images like this:

Why does my php page download images over and over
Can anybody please explain to me why my php page keeps downloading the images and other items every