Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

=> and <=
So I was digging through some code when I came across the <= operator. This is the first tim

Baffled by Undefined Index in Simple Array: Please Help!
Hello. I have a form which posts an array to this script. However, I can't seem to access the values

Port scanner problem
Hai
recently i developed one app through which u can check the opened and closed ports under an

Show specific day of the week
I have been racking my brain trying to get this function to work properly and it is doing so for eve

need a script for 3 pages
I have a customer who wants me to set up a site with a number of pages with the following requiremen

problem with query error
First Thanks to those who helped me on my previous posts, and the following code i'm using is not mi

PHP IMAGE UPLOAD SCRIPT
Hi for the last week i have been looking for scripts that will upload a photo to a certain folder wh

question about stripslashes and real_escape_string
im cleaning up an old app that I wrote fixing some of the vulernabilities from attacks.

I hav

Download Image from URL and Upload it
Ok, I have been googling for the last 1/2 hour trying to figure this out, Most likely I'm just not s

While Problem
i am having a problem with a while statement here is the code
Code: [Select]<?php
sess