Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

quick basic question, hopefully not dumb
I don't know how to search for this, so forgive me if it's been covered...

I often see an exa

session variables not working anymore
hello,
i use sessions to handle authentication within my site. my host has been changing a lot of

Character Sets/Collations Stuff
Can someone please give me a check list of things I must do to setup all the charset stuff for my ph

Could Someone Please Debug This?
I was wondering if someone could debug this script for me. I realize it's not the tidest script (and

UDP server recvfrom() always returns -1? :(
Hello all,
I am getting a very strange error in my code :( I am writing a server application in C

help with email script...
hey

I need help with my mail script

when the form on http://www.mcgdesignstudio.com/c

error checking breaking my code
Hi there, OK first of all, big apologies for what I assume is really fundamental errors in the struc

Is there a quick way to do this?
Hi all,

I need to create a mysql table from php that goes a little something like this

Registration
ok so i have a site where people can register and login which works now thanks to someone on here th

blank page.... nothing is happening.
I'm new to a lot of this but in the last 24hrs have learned a lot.
Installed latest version of my

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash