Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Help Import Animoto and Youtube
CAn someone help me urgently want to allow users on my website to import youtube/revver/dailymotion

I would like "for" to wait 5 sec
I would like my 'for' loop to wait 5 sec before second iteration.


for ($i=0; $i<10

ALV grid with 2 headers
Hi Gurus,

I need to display ALV GRID as below.

Header1

How do I send data using an html link
Hi

If I have
<a href="main_file.php">

How do I send data t

Typing math
I've added support for typesetting math using LaTeX on the forums.

Example:
Code: [Select]

Loops and Classes
I am making a template system and everything seems to be going well up until I have to loop in a var

Drawing Images in classes
I'm quite new to Object Oriented PHP. What I'm trying to do is draw some images but also have other

PHP switch function help
Hi, I am trying to create a search function for a directory website. On the search function on html

how to load php class from another domain?
how to load php class from another domain?

NOOB needs help with upload file
The intent of this form is to create a folder for a client and upload an image into another folder '