Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_
Can anyone view my code and tell me why im getting the error:
Parse error: syntax error, unexpect

Quick variable question
hey guys/gals,
im trying to write a php script and it works fine as i have it, but i need to set

php require help needed
Ok i tried to use the search funtion but the word require is everywhere.

i'm really new to cr

Lining up columns nicely.
Hello everyone, I'm having problems with making columns line up properly. Here is my code:

Gantt Chart Tool
Does anyone know of a good free gantt chart creator tool

Thanks

filesize() returns 0
I have a socket program that runs in an infinite loop, listening for connections, in this socket I h

Reduce redundancies in switch functions?
Hello all! I somewhat new to PHP, and was wondering if anyone could give some suggestions on a swit

Replacing a string on click of a button
Hi! Is there a way to replace a string on a click of a text link?

This is what I've come up w

grouping within a foreach?
hello all,

I currently have a list of products spit out from my db via a foreach loop. Right

Collecting AOL Search Terms
I am attempting to collect AOL search terms. I know the code is correct (it works for google, bing,