Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Problem with creating FI documents
Hi, Experts!

when i create Fi doc. with standart transaction, i ve been had such problem

Program with calculate Meteorologic measurements
Hello I'm a beginner and I want to make a program with calculate Meteorologic measurements:
ba

error help - Dynamic Image
I've been working on making my site less cluttered in the directories and more secure lately. In an

data type in column definition
Hi,
I create a table with column called "Direction of Travel code ".
The travel codes in t

Text Not Displaying Correctly With PHP:GD
I recently moved servers and since then I have noticed that one line of text is showing weirdly.

Function
How can I make this function that once you click the link in the code it takes you to a new page wit

IIS & NW MII on the same server
Hi,

We're weighing the possibility to run both IIS and MII (NetWeaver) on the same server

i have no idea why this isn't working
Code: <?php
session_start();
include("connect.php");

error_reporting(E

array & querys help/advice.
Ok so here goes , I have a mysql database and basically here's what I need to do.

// foreach

no idea what to do...
I'm fed up. I had issues with code that I have working on a different site that didn't work on my cu