How do I convert a string into safe SQL String?

by

There is only a single character you have to escape: ansi 0x27, aka the single quote:

safeString = unsafeString.Replace("'","''");

More Related Contents:

  1. Sanitize table/column name in Dynamic SQL in .NET? (Prevent SQL injection attacks)
  2. store image in database or in a system file? [closed]
  3. SQL Identity (autonumber) is Incremented Even with a Transaction Rollback
  4. SELECT * FROM X WHERE id IN (…) with Dapper ORM
  5. Bulk Insert to Oracle using .NET
  6. Parameterized Queries with LIKE and IN conditions
  7. Using “GO” within a transaction
  8. Does End Using close an open SQL Connection
  9. Does this code prevent SQL injection?
  10. How do I write LINQ’s .Skip(1000).Take(100) in pure SQL?
  11. How can you name the Dataset’s Tables you return in a stored proc?
  12. How can I create database tables from XSD files?
  13. How can I avoid SQL injection attacks in my ASP.NET application?
  14. Why is some sql query much slower when used with SqlCommand?
  15. Is it possible to send a collection of ID’s as a ADO.NET SQL parameter?
  16. How can I configure Entity Framework to automatically trim values retrieved for specific columns mapped to char(N) fields?
  17. Regular expression to find all table names in a query
  18. How to return a page of results from SQL?
  19. Using a variable for table name in ‘From’ clause in SQL Server 2008
  20. What is the difference between .NET Core and .NET Standard Class Library project types?
  21. sql runs fast in ssms slow in asp.net
  22. How Random is System.Guid.NewGuid()?
  23. How to disable click sound in WebBrowser Control
  24. .Net Framework 4.6.1 not defaulting to TLS 1.2
  25. What does “{x:Static}” mean in XAML?
  26. How to make a .NET application “large address aware”?
  27. WCF error: The caller was not authenticated by the service
  28. Where is the “Create Unit Tests” selection?
  29. How do I control MembershipProvider instance creation/lifetime?
  30. Visual Studio popup: “the operation could not be completed”

Leave a Comment