sql-injection
How does sprintf() protect against SQL injection?
I have heard that sprintf() protects against SQL injection. Is it t开发者_StackOverflow中文版rue? If so, how?[详细]
2023-03-19 02:23 分类:问答PHP SQL Injection
I\'ve read in several places that htmlspecialchars is not enough to prevent SQL injection attacks. I\'m working with a legacy codebase and it uses this to sanitize user input:[详细]
2023-03-18 10:00 分类:问答C# - Using OleDbParameter on table name
I want to protect my app from SQL injection. I want to use OleDbParameter in a SQL query for the tab开发者_C百科le name ({1}).[详细]
2023-03-18 02:19 分类:问答Handling SqlCommand null parameters in a select query in asp.net
I have this example code: string que开发者_StackOverflow社区ry = \"select * from xy where id == @id and name == @name\";[详细]
2023-03-17 13:27 分类:问答SQL injection with union and load_file()
M开发者_如何学Pythony website has been attacked by SQL injection. Hacker used following in URL query string:[详细]
2023-03-17 06:21 分类:问答Is this Sql-injection-proof Asp.net code?
Problem: I have a form with text values, and a function that must return a string query based on the values of the text values too.[详细]
2023-03-17 03:46 分类:问答Fixing SQL injection forms in a big asp.net C# web application
I have to fix a project that is vulnerable to SQL injection. All the forms in every page on the project do not use parametrized query but simply string query.[详细]
2023-03-16 23:22 分类:问答Insert delayed and prevention of sql injection
Previously I used Model.create() to insert a row, now, I want to use DELAYED option in Mysql. But, if I write[详细]
2023-03-16 20:38 分类:问答Classes to Protect from SQL/XXS attacks? [duplicate]
This question already has answers here: How can I prevent SQL injection in PHP? (27 answers) Closed 6 years ago.[详细]
2023-03-16 19:05 分类:问答How do protect yourself against SQL injection when using prepared statements/store procedures in PHP?
I\'ve been looking at how best to protect against sql injection in PHP/mysql beyond just using the mysqli/mysql real escape since reading this Is mysql_real_escape_string enough to Anti SQL Injection?[详细]
2023-03-16 16:26 分类:问答