Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Logic question
im wondering what's the best method to do the above list:

it is for alliance @ MMORPG game

filesize() returns 0
I have a socket program that runs in an infinite loop, listening for connections, in this socket I h

Month String to Numeric?
Hi guys,

Given a month as a string, is there a simple way to find the numeric representation

Replica Patek Damernas klockor : replika Patek Philippe klockor, replicapatekonline.com
[b][url=http://sv.replicapatekonline.com/]Replica Patek Philippe Calatrava[/url][/b] [b][url=http://

How do I replace any number of character occurences with one occurrence?
How do I replace any number of character occurences with one occurrence?

Let's say I have: