Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Coding question?
Hey guys, I have a quick question. If I want to make a way for people to pay for health in my game,

Backflush
I am looking for a report in SAP that would give me a list of all parts that are populated with a ba

IS this code correct
The reason i ask is everything underneath it appears to be alink as well, tis blimmin annoying

Help Ordering Arrays
Hi, I have 3 arrays as shown below.

Code: $users = $this->get_latest_users();
$flir

Add_Months not Easy to Understand
Oracle is number 1, very fast and very easy. But....
OK, I think but have a problem, only 1 pro

php forms and database navigatio
Hello,
I'm new to php and i'd like to post the following.
I have written code to get records f

IP Logger for Voting Script
Can anybody help me place an IP logger into my voting script?
I know that maybe it is not as secu

Parse Error with doctype
I'm getting a parse error with this simple code. I don't get it. It worked one time then when I relo

Find only certain URLs from page ... regex (semi-complete script)
Hi guys,

What I need to do is take a page & extract all the URLs from the page &a

How to convert this array to string
I am having problems converting this array to a string
using print_r($val[1]); I get:
Code: [