Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Need to write a cookie with a url var
Not sure if its possible, but I need to write a cookie with a url.

So this would write 2232 a

Array question
Does anyone know how to create a program that takes the $ amount for 8 different departments and gi

Limiting uploaded file type
Hi. First post here
I am working on a simple upload script, and I need it to limit the allowed f

Join Query Help
Hi all,

I am having problems with the below code, which we shall call 'my first join query'!

pspell
using pspell, is it possible to get words that would be best in the current phrase?

For examp

php/mysql auto logout after 2 hour and reset password
Hi all,

This I hope will make sense. I've the following code which when a user logins in, cr

Help with Contact Form
I have this Form on an html page and the associated code on page.php (below).
I keep getting the

Typing math
I've added support for typesetting math using LaTeX on the forums.

Example:
Code: [Select]

how to query data from website using VC?
I want to query some datum from a website,so I need a program to read data from a .csv file, and ass

Form errors in an array
I'm processing a form and putting the errors in an array. empty($errors) doesn't seem to do the tric