prevent sql injection commands C#

Ivan Londono answered on July 7, 2021 Popularity 8/10 Helpfulness 1/10

answer prevent sql injection commands C#

related How to prevent sql Injection

related c# - What are good ways to prevent SQL injection?

related prevent sql injection commands C#

prevent sql injection commands C#

Comment

String query = "SELECT account_balance FROM user_data WHERE user_name = ?";
try {
   OleDbCommand command = new OleDbCommand(query, connection);
   command.Parameters.Add(new OleDbParameter("customerName", CustomerName Name.Text));
   OleDbDataReader reader = command.ExecuteReader();
   // …
} catch (OleDbException se) {
   // error handling
}

Popularity 8/10 Helpfulness 1/10 Language csharp

Source: Grepper

Tags: c# sql-injection

Link to this answer
Share Copy Link

Contributed on Sep 18 2023

Ivan Londono

0 Answers Avg Quality 2/10

Closely Related Answers

How to prevent sql Injection

Comment

// use prepared statement to prevent SQL injection
$preparedStatement = $dbConnection->prepare('SELECT * FROM animals WHERE name = ?');
$preparedStatement->bind_param('s', $name); 
$preparedStatement->execute();
$result = $preparedStatement->get_result();
while ($row = $result->fetch_assoc()) {
// Process $row
}

Popularity 10/10 Helpfulness 2/10 Language sql

Source: phppot.com

Tags: sql

Link to this answer
Share Copy Link

Contributed on Jul 07 2021

Outstanding Lioncatcher

0 Answers Avg Quality 2/10

c# - What are good ways to prevent SQL injection?

Comment

private static void UpdateDemographics(Int32 customerID,
    string demoXml, string connectionString)
{
    // Update the demographics for a store, which is stored  
    // in an xml column.  
    string commandText = "UPDATE Sales.Store SET Demographics = @demographics "
        + "WHERE CustomerID = @ID;";

    using (SqlConnection connection = new SqlConnection(connectionString))
    {
        SqlCommand command = new SqlCommand(commandText, connection);
        command.Parameters.Add("@ID", SqlDbType.Int);
        command.Parameters["@ID"].Value = customerID;

        // Use AddWithValue to assign Demographics. 
        // SQL Server will implicitly convert strings into XML.
        command.Parameters.AddWithValue("@demographics", demoXml);

        try
        {
            connection.Open();
            Int32 rowsAffected = command.ExecuteNonQuery();
            Console.WriteLine("RowsAffected: {0}", rowsAffected);
        }
        catch (Exception ex)
        {
            Console.WriteLine(ex.Message);
        }
    }
}

Popularity 9/10 Helpfulness 1/10 Language whatever

Source: sqlerrors.com

Tags: c# c

Link to this answer
Share Copy Link

Contributed on Aug 15 2022

e-mallz contact

0 Answers Avg Quality 2/10

prevent sql injection commands C#

Comment

string sql = "SELECT * FROM Customers WHERE CustomerId = @CustomerId";
SqlCommand command = new SqlCommand(sql);
command.Parameters.Add(new SqlParameter("@CustomerId", System.Data.SqlDbType.Int));
command.Parameters["@CustomerId"].Value = 1;

Popularity 8/10 Helpfulness 1/10 Language csharp

Source: cheatsheetseries.owasp.org

Tags: c# sql-injection sql-i

Link to this answer
Share Copy Link

Contributed on Sep 18 2023

Ivan Londono

0 Answers Avg Quality 2/10

prevent sql injection commands C#

Contents

More Related Answers

prevent sql injection commands C#

Closely Related Answers

How to prevent sql Injection

c# - What are good ways to prevent SQL injection?

prevent sql injection commands C#

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.