Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

newbie question about multiple queries
hi everyone,
I'm sorry to ask such a basic question, but I'm young and trying to learn php on my

Web Application Recipe
Hi Guys!

I am working with the Web Application recipes. I am currently working on the sen

How to update this array?
I am saving a string that looks this: username1, username2, username3...
into a single cell in a

HTML form problem
Ive made a form to that i want to send to my email via PHP. but when it send only the name's etc sen

Change Age automatically
hi guys . im new to php , is it possible to change age value in mysql automatically when year change

phpmailer class & pop.gmail.com?
Code: <?php
$mail->IsSMTP();
$mail->Host = "pop.gmail.com";

Help with simple query
Hi,

I'm trying to do a Query with a Union where I want to print the number of rows $tc conta

LOOPing Problem
Hello All!

The following code loops through the data and displays the data accordingly. My p

Standard DES encryption script?
Can anybody point me to a tutorial or a short script that shows how to encrypt some text with salt i

How to make a mail Form secure?
I want to create an email Form on my web site. How can I make the Form secure so the submitted info

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash