Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Simple AND question
Hello,

I've got following code:

Code: if(strpos($row[13],"http://")

generating all possible random letters
hi'

how can i randomize the letters a,b,c,d,e all possible ways, and i want to print the res

Changing files over
Just thought I'd start with the new forums looking really nice .

Ok basically I've made this

help with Get_
ok some how this is not working i am not sure what i am doing wrong here but what this does is when

Need help in log in and log out?
hi there all of u. i have recently created a site for someone. i have placed log in and log out and

understanding functions and classes
Code: [Select]
class person {
var $name = "Jimmy Goe";

function get_nam

database design
Hi,

I got a page which allow candidate to type in their previous working experience,
I let

[function.file]: failed to open stream: No such file or directory
Okay I wrote this little script to upload a csv file that is located on my webhosts server to a mysq

"GROUP BY" in arrays
Well i'm looking to do something i usually could do easily using COUNT and GROUP BY if it was a sql

gmdate() - want 1 hr before time
Hi,
I am using php gmdate().
Now I am entering all dates in my dbase using gmdate("Y-m-d