Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

b+ tree
Hi
can every body help me about b+ tree ?(insert & delete)

Array question
Does anyone know how to create a program that takes the $ amount for 8 different departments and gi

Session login issue
I'm wondering how to fix a problem I'm having with a session-based login system

Say I go to h

Insert numbers from Barcode scanner into online php page
I have a real big problem, Here is what I'm trying to do. I have a Intermec CN3 handheld computer th

PHP and MySQL Question/Help
I have a MySQL db with all my servers and all their details like server name, IP, OS, RAM etc etc 26

Basic Question Regarding PHP Includes
Hi

Just starting out with PHP.

Working on a site that uses some basic includes, these

php forms and database navigatio
Hello,
I'm new to php and i'd like to post the following.
I have written code to get records f

Members Only
Hi all, for my website i have a members area only which on members can veiw, but at the moment anyon

Production Order Enterprise Service to Manufacturing Exctn Sys (MES) ???
Hello Experts,

In our current landscape SAP ECC 5.0 is integrated to MES system via PI 7.

Mouseover to edit (Ajax)
hi friends, can anyone help with the code behind to get this application working, please in VB (new