How to prevent a SQL Injection escaping strings

by

You need to use parameters. Well dont have to but would be preferable.

SqlParameter[] myparm = new SqlParameter[2];
myparm[0] = new SqlParameter("@User",user);
myparm[1] = new SqlParameter("@Pass",password);

string comando = "SELECT * FROM ANAGRAFICA WHERE E_MAIL=@User AND PASSWORD_AZIENDA=@Pass";

More Related Contents:

  1. Does using parameterized SqlCommand make my program immune to SQL injection?
  2. How do I re-write a SQL query as a parameterized query?
  3. How do I calculate someone’s age based on a DateTime type birthday?
  4. How to provide user name and password when connecting to a network share
  5. How do you sort a dictionary by value?
  6. how to create an animated gif in .net
  7. AddBusinessDays and GetBusinessDays
  8. Windows Forms Splash Screen – Show a form while loading main form
  9. Is there an alternative to string.Replace that is case-insensitive?
  10. AppSettings get value from .config file
  11. IEqualityComparer that uses ReferenceEquals
  12. The calling thread cannot access this object because a different thread owns it.WPF [duplicate]
  13. Internal vs. Private Access Modifiers
  14. IEnumerable to string [duplicate]
  15. How to catch ALL exceptions/crashes in a .NET app [duplicate]
  16. How DataReader works?
  17. C#: How to add subitems in ListView
  18. How to compare only Date without Time in DateTime types?
  19. When or if to Dispose HttpResponseMessage when calling ReadAsStreamAsync?
  20. How do I programmatically save an image from a URL?
  21. Days, hours, minutes, seconds between two dates
  22. Selenium WebDriver throws Timeout exceptions sporadically
  23. smtpclient ” failure sending mail”
  24. Explanation of Func
  25. Subscribe to INotifyPropertyChanged for nested (child) objects
  26. How do I minimize a WinForms application to the notification area?
  27. .net connection pooling
  28. Encryption compatible between Android and C#
  29. Repository Pattern, POCO, and Business Entities
  30. Two Types not equal that should be

Leave a Comment