Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Perplexing problem showing a .jpg
Please disregard..........I figured it out

How to find OS bit version
How can I tell the person browsing my site is running 32, or 64 bit operating system?

Insert Failing.
Hey,
I am making a Sign up page for a website, but the insert query into the Database does not se

UTL File problem
Hi
I have a file in certain path with the following permissions (The file is a dummy file witho

C - Reading a file into a byte array
Hi,

I'm trying to read a file into a byte array in C. I have to use C as this is for a loadru

IMAGE - SERVER SIDE scripting help...
How to receive pixel data of an image and buid a bitmap file on the server using the HTTP POST metho

BI in Upstream Production operations
Appreciate if you can assist in the following areas:
1) Examples of life before and after BI i

ob_ dynamic content
i was wondering about the potential to use ob to create a <div then remove it when the page

newbie question about multiple queries
hi everyone,
I'm sorry to ask such a basic question, but I'm young and trying to learn php on my

Error when call dll from oracle
Hi all, please help me!

I have dll write C language, I want call it from oracle procedur