Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Generate PDF
Hi guys,

I would like to know if there is a way to generate pdf when clicking on a link. In f

Custom list order
Hi there,

I have checked this tutorial and it's great till the point where I want to display

Help! refer to a friend script with captcha code
Hi guys, I am posting on here in desperate need for some help with an ongoing search I have been doi

PHP Search Issue
Hi, I am using the following code to search and return flights from a database. The user searches by

Error in SQL Syntax HELP!!!
I have this page:

Code: <?php

session_start();

//connect to server and s

problems with search form numerical "between" sending by php
I am trying to display the results of a search, on a sql database, on a web page. I set up html &quo

how to export excel file in same server
My first post - php newbie, so appreciate your support.

I'm currently using headers to save w

Multiple Options for a Single Page
For this example I want to use the Handlers option which is under Fed Admin and all the related codi

question about n
I was looking at some of the things you could do with php and one of the things I have tried is n.<

my two tables
table1 : col1 = topicid , col2 = topic

table2 : col1 = sentid, col2 = sentence

Cod