Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

WM transfer order: confirm different batch than proposed by system
Hi folks,

following scenario: we have a full WM with mixed batch numbers allowed in stora

Wordpress IE issue
So I am trying to add the background shadow to my wordpress page. It works fine in Firefox but does

SQL query not working well
Hi,
I made a small table with 5 rows and want to make them an sql consult using rownum

this code is not working????
it says this error.. Warning: Division by zero in ..

the variables are correct, so why is th

Two fgetcsv related questions ;D
First of im trying to get a file from a merchants server but the directory is protected, I know the

Form validation with functions
Hi there

I am trying to make a very simple form validation function. I currently have the fol

When file included, REMOTE_ADDR is server's?
I have an index file that handles my site, basically index.php?page=ip will activate "require('

Developing Ajax-enabled ASP.Net applications for the iPhone
I would like to develop Ajax web applications using Visual Studio that are optimized for the iPhone.

what business processes?
Hi,

A general question. What business processes (like OTC - Order to Cach, P2P, R2R etc)

simplexml and xpath - Need some help
Hello,

I am trying to parse an xml which comes back from Amazon and I am trying to know how m

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash