Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Renaming a file that a user uploads to site?
My site allows for registered users to upload images to the site under their own gallery. Currently

pageination not working right... coping images over 4 pages
Code: <?php //This code will obtain the required page number from the $_GET array. Note that

Recognising Revenue daily
Hello.
Has anyone come across daily recognition of deferred income?
We want to implement R

a function to check directory depth
I'm working on a php script to upload files in to a set directory.
the user can select to upload

ECC6 - Single sign-on
We are in the process of upgrading to ECC 6 which will support single sign on with user passwords al

How would I protect......
I have a from, actually, a good amount of forms. How can I make it so you can't type the characters:

Javascript using window.location seems to lose state
Not sure what forum so let me know if I'm in the wrong place. I have a main window with a ajax grid

Multiple websites question.
Hi, does php have any functionality that enables a programmer to extract information from a website

reading xml faster than DB call?
I am trying to optimize a high traffic website, and I enabled a feature where there are three photos

retrieving images from mysql database using php
So I've been trying to figure out how to store images in a mysql database, and as far as i can tell