Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

ImageCreate()
When I create an image and add text to it I want my text to be replaced with a PNG image, because th

Looking for help reading a .txt or .ini file and outputting the info.
I have a file called Info.ini and It has the following info:
Code: [General]
Online=0
I wou

Text Not Displaying Correctly With PHP:GD
I recently moved servers and since then I have noticed that one line of text is showing weirdly.

default SAP userid
hi,, I just like to know if it is ok to use the default SAP user id (SAP*)?

need help with mail()
hi i want to send an email with attaching pdf file using php. i have the following script but the pr

Text file to .Dat file Conversion in PHP
Hi All,
Could anybody provide code for Text file to .Dat file Conversion in PHP.

Tha

Kill a process
I have a question - how can I kill a process from a command line or by using Oracle SQL Developer? I

getting most records by count
Code: [Select]<?php

$connect = mysql_connect("localhost","dam

Question about GD library
I am trying to make an image that shows a random quote from my database.


However I want t

Help! refer to a friend script with captcha code
Hi guys, I am posting on here in desperate need for some help with an ongoing search I have been doi