Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

limit string by words??
hello all,

I was wonder if there is a function to limit a string by the number of words inste

Socket Server
In my following socket server, I am trying to listen to a connection through port 12345 in my web br

Include with Parameters
In a particular page I would like to include a file that requires $_GET parameters.

when I go

SQL Query/echo not working
Hey all,

I'm trying to run (what I thought) was a simple operation and it isn't working. I h

Website Direction...
I recently used this code to try and make it so the page loads as http://www.domain.com/ when you ty

grouping within a foreach?
hello all,

I currently have a list of products spit out from my db via a foreach loop. Right

Storing the referrer in session... problems with tabs
Hello All

I am currently working on an ERP project based on the MVC methodology, when a user

Slashes
Have a small problem and I'm not able to understand why I'm getting the results I'm getting... and i

Simple Variable Question
Hi everyone.... again,

I am really getting into php still. Learning more every day. I love it

How can use this array as a key?
Say I have this array for example:


print_r($array);

Prints:
Code: [Select]Array