Preventing SQL Injection

Posted on 16th Feb 2014 07:03 pm by admin

I have a question about SQL Injection, In some of our code we use this: view plaincopy to clipboardprint?Replace(inString, "'", "''") Replace(inString, "'", "''") does this prevent all forms of SQL Injection? Also what exactly does parameterized statements do?view plaincopy to clipboardprint?myCommand.Parameters.AddWithValue("@username", user); myCommand.Parameters.AddWithValue("@password", pass);

Your Answer:

Login to answer

Other forums

Update Database
Hi All,


I have a problem with this:

Code: [Select]<?php
session_start();

How to form a xml form table with a single sql statement..?
Hi everyone,
I don't know if this is going to be a duplicate thread but i couldn't

getting weird error..
okay, I'm getting an error on this particular function, something about the syntax in the mysql LIMI

my sql select id and then update problem.
I need to select some auto incremented ids out of a database and then use those id in a where statem

retrieving more than one max key from an array?
so i have an array of 20 numerical values (0-100) that i need to order from highest to lowest and th

I didnt code this but I need help with it
I'm sorry. i'm not a coder. I have this script for forcing download and previewing mp3. The guy that

mySQL and PHP search
Hello,
I am trying to code a project and ran into a brick wall with one of my pages. I am pretty

Help with echo()
I'm having some problems with this code:

Code: echo '
<A HREF="jav

"From field" in PHP email form
I used a wizard to create a PHP email form. I was able to customize it with the exception of the Fr

What am I missing here? Help!
Hello all!. I can't seem to get this working right. Well - it renders right, but something is goin