Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

pagination - need help on passing of search query.
Hi, i have been trying for days but couldn't get this sorted out. Would like some professional help

iMatch stored value with the current value in a loop
Hello,

I have a MySQL db were I store articles in.

I have a form to fill these article

Getting a variable to work in function params
I have this fuction which is inside a class:

Code: public static function generateEmbedCode($

Get word number x from string?
How can I use a function to loop through a string, and "have a look at" every word in the

Help on query replacing the date
Hi Pals,

i want to replace the current date in a column to some value say C or D or any n

Server side $_SESSION
how does one keep the session completely server side. no cookies to the browser at all. i need this

How do i use vars in an array
Hiya peeps!

How do I use a var in an array. You will see $id but it isnt working.


what does this mean? +=
is anyone able to explain what this code is saying?

i had it written for me awhile back and n

Help with some dates
I have a list of dates in an array:

$mondays = array(
strtotime("October 12, 2009

Track downloads' status
Hello,

I need to make somehow, some system, to track whether downloads are completed or faile

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash