Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

Not capturing all the information we require in the form.......
Hi Guys,

I was wondering if you would share some more of your knowledge today, I'm hoping it

Running External Scripts
I am very new to PHP and am not even sure what I'm asking is possible. I have just installed mediaW

Renaming a file that a user uploads to site?
My site allows for registered users to upload images to the site under their own gallery. Currently

Significance of BPM
Hi Experts,
I am a novice in BPM , I just want to know how BPM as permenant department is

Mail functionality from localhost to server
Hi

I am facing problem of mail functionality.

When i tested mail functionality in my

PHP and MySQL Question/Help
I have a MySQL db with all my servers and all their details like server name, IP, OS, RAM etc etc 26

problem with GROUP BY and ORDER BY
i usually use this query to display the last 10 entries from a sql table:

Code: $query = &quo

Local file browser with php
Halo..

So this is what i want to create. I have a folder that i share and it has many movies.

Track downloads' status
Hello,

I need to make somehow, some system, to track whether downloads are completed or faile

How can I get my program to read a larger array ??
Hi:

I have this program that reads from an array to do calculations. The array are just t

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash