c# Programming Glossary: safedbstring
Avoiding SQL injection without parameters http://stackoverflow.com/questions/910465/avoiding-sql-injection-without-parameters want to do this string sql SELECT FROM Users WHERE Name SafeDBString name SqlCommand getUser new SqlCommand sql connection ... blabla.. sql connection ... blabla are we safe now Where the SafeDBString function is defined as follows string SafeDBString string inputValue.. the SafeDBString function is defined as follows string SafeDBString string inputValue return ' inputValue.Replace ' '' ' Now as..
|
