Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

ASP.NET 2.0 - Enter Key - Default Submit Button
Hi,One of the most annoying things in developing web pages is handling the "Enter key" for form subm

Php - mysql select?
hi, i have this code:

Code: <?php
session_start();
// dBase file
include &quo

How to add an image/C++ OpenGL?
Hi,

I have been trying to look online for this and, so far, I haven't found anything usef

Email logic not working
I would like to send an email using the php email() function then if it does execute i.e sends i wou

need help in creating captcha
hi i have a problem creating captcha system. i create some basic script for image displaying but it

printing links
Hi every1

i am connecting to a table in sql and the looping through with a while ($ var = my

Trigger tag in aspx is not coming
hi all ,iam new to ajax, iam using file upload inside the update pannel but right now i want to use

php wont update my db
hello,

sorry for posting in mysql forum but i dont know where exactly is the problem but here

disabling a button server-side then re-enabling client-side breaks button postback
I have a tabbed container and a button (not in the container) on a page. If the first tab is selecte

PHP Blog help
Need help with posting comments in a word press blog? I have a comments page where the comments are