Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

The page should be expire when cilck back button
hi,
i'm new to php world.
i create user registration page.
when i submit it,data goes to my

Libraries in C++
Hi all,

I have two libraries. one is based targeted on linux platform and uses another li

how to transport the Query and insfoset
Hi

I have created the query using SQ01........
How to created T-code for query..

modifying a property of an object from a different class
I have 2 classes:
- Math
- Distance

in my math class, I have this line:
$distance =

Unable to customise toolbar in FCK
Help with php code
Hello, can anyone tell me why this php word trap fails to work,
and the trigger words get blow r

Is it possible to view php source code??
Hi All

I was just wondering if it's possible to view a websites php source code?
I know

PHP error (line 38) my website
Hello everyone, I'm new on this
and I got a web site thats got a error not showing the photos on<

Links not updating
I'm trying to fuel a simple navigation system for a news section. It works fine when it comes to ret

Record count of entire database
Does anyone know if there is a way to obtain the number of records in each table of the database usi