Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Menu restriction
How can I restrict the individual menu that would appear when a user logs in so that all users are c

first few characters only
hi, does anyone know how to use PHP to take the first few words of a text and limit them? i have see

Storing/displaying image urls in a database?
Hi
Basically I have the following scenario:
User chooses picture from list. Picture info is ad

Storing the referrer in session... problems with tabs
Hello All

I am currently working on an ERP project based on the MVC methodology, when a user

php/xmlrpc class issue
I am working on xml-rpc in php to start with.

I have a class that only has variables defined

get multiple rows
Hi I want to get multiple rows from a db

I am using this for the db query
Code: public

Issues: PHP Forms -Clearing
I've tried looking online before actually asking for help, but I've been looking for about the past

Help Ordering Arrays
Hi, I have 3 arrays as shown below.

Code: $users = $this->get_latest_users();
$flir

Calculating a rating by adding number of points and dividing by number of items
I have a site that users can post links to files to download. They can rate these files on a 1-5 sca

empty() error
Why does

Code: empty($USER_ID = $_SESSION["USER_ID"])
create this error...