Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Gantt Chart Tool
Does anyone know of a good free gantt chart creator tool

Thanks

upload only text files
hi guys i want to upload only text like like (pdf,note pad and ofiice files) so can any one please t

To change the name of label on SAP screen XK02.
Hi All,

Can one suggest me how to change the label of an input field of a sap standard s

php/xmlrpc class issue
I am working on xml-rpc in php to start with.

I have a class that only has variables defined

Basic Question about Threading and PHP...
I have a page that I am working on and it is taking several hours to process. The basics of what th

How do I know when getBounds Method is ready to be called.
I have an application that changes out stylesheets client side. Once I change stylesheet the browse

simple script won't work. Please help
I'm new to php, and I am having trouble displaying a simple script in my web browser. My php code ex

printing links
Hi every1

i am connecting to a table in sql and the looping through with a while ($ var = my

browse folder only
hi,
is there a way i can browse or get the directory or folder only and not the file?
i just w

Varible in trigger - refering to correct schema
Hello

Im having some issues with my trigger.
What I want to do is call opon a differ