Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Display last record first.
I need some help how put the last record first and first record last.

Thanks

Code: &am

Redistributing dependent dlls
Hai all ,

I have created an application in VC++ using VS2008 in a development machine which r

need help with php get
i have a option box that gets filled with dates, but how do i get once the option value has been cli

captcha error
I have been trying to implement a captcha in php...

here is the code..
Code: (php) [Select

PHP form help required
Hi all! Apologies in advance for having to message the forum for help. I know you must get a lot of

Retail terminologys not been altered after activing Retail System
Hi, All

After I active Retail System via TCode SWF5, the terms does not been changed, th

How to add functionality to a simple php calender?
Hello everyone,

I have just finished creating a simple php calander. Can someone point

$get problem
Hi Guys ...

can you please tell me what i am doing wrong here
Code: <?php

Issues: PHP Forms -Clearing
I've tried looking online before actually asking for help, but I've been looking for about the past

Convert array to string and write to csv file
I am looking to write a MySQL query to a csv file.

At the minute I:

check for the orig