Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

str_replace help
Hey there,

I'm a PHP newb, I'm having troubles with the str_replace function. I want to clean

Warning message
I've put a website that I was doing live and I'm getting this warning message when I try to add a ne

PHP XML extraction text
I would like to extract an xml text and have that text directly echo(print) out on my web page. Her

mod_rewrite.c on windows ??
why it's not working on windows while it's working on other hosts???

this is the code i got

Beginners syntax and loop questions - help please!
Hi everyone,

I have some problems with php code. I'm currently in the middle of learning php,

PHP friend keyword equivalent
is there a PHP equivalent for the C++ friend keyword?

b+ tree
Hi
can every body help me about b+ tree ?(insert & delete)

if statements problems
Hi. I'm trying to make a web form, but I kind of hit a dead end trying to figure out why it doesn't

Reditecting pages based on logic
Newbie here, apologies in advance!

I am trying to use the header function to forward one of a

session variable problem
Session variable is not working in Fire fox i am getting null value but it is working fine in IE.

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash