Mondeo Posted January 6, 2007 Posted January 6, 2007 Whats the best way to prevent this, I mean to prevent malformed user input from causing an exception. I've realised the obvious of removing any apostrophies before generating the SQL statement but i've no doubt theres a lot more to it than than! Quote
Administrators PlausiblyDamp Posted January 6, 2007 Administrators Posted January 6, 2007 Use stored procedures or parametrised queries. Basically avoid string concatenation in any of it's forms. Quote Posting Guidelines FAQ Post Formatting Intellectuals solve problems; geniuses prevent them. -- Albert Einstein
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.