Preventing SQL Injection


Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);
No comments posted yet

Your Answer:

Login to answer
202 Like 50 Dislike
Previous forums Next forums
Other forums

Help with captcha script needed
Hello,

I am working on a script where reCAPTCHA or a similar form of CAPTCHA will be used, f

Seperate team from score
I am writing a site that does a NFL Pick 'em type application and I have a feed that gives me the sc

MySQL Primary key gap
Alright, so I have a table with 26 entries in it (id, filename, caption) for my image randomiser (ht

Quick Question about echo value
Hey guys, I'm trying to get something to show differently in one of my scripts. I'm trying to make

How to read CSS message data
Hi,
I have a requirement here. When working as a Dev angel for multiple customers its really di

Secure FTP
Hi experts,
There is no SFTP action in MII workbench.
This means it needs developing custo

Upload Code Help
Hi everyone I need some help with a bit of code ive been working with for a while. I am completely s

Delete all files in folder except with certain name
I have a script that I want to delete all files in a folder (taken from a database) except for one n

Validation
Hello

I know this is a really vag question.

I need to have a input field on a form th

PHP header help!
Hi all I am trying to get this php page to refresh every 5 seconds on my phone which is an aastra 48

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash