Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Is there something wrong?
Hi all,

Just a quick question... can someone look at this code and see if something is wrong?

SCRIPT ERROR
Here is the CONTACT FORM I made for our website:

<form id="form1" name="

problem with query error
First Thanks to those who helped me on my previous posts, and the following code i'm using is not mi

some query on multilingual website
Hi all,

Which is the simplest and easiest method to make a website multilingual,
is it put

Line break?
Hi, I'm new to the forum and new to php. I'm not sure if I'm using the correct terminology so here i

Typing math
I've added support for typesetting math using LaTeX on the forums.

Example:
Code: [Select]

How to add an image/C++ OpenGL?
Hi,

I have been trying to look online for this and, so far, I haven't found anything usef

rand() function
just a general question guys a girls, is the rand() function 100% random or is it based on time?

blank page.... nothing is happening.
I'm new to a lot of this but in the last 24hrs have learned a lot.
Installed latest version of my

How to implement HTTP connection timeout
Hi All,I would like to implement an HTTP connection timeout.

I am working on a application wh