Hey,
What are the usual ways to encode a sql string for safe insertion into the
db? Are there
handy functions like php's addslashes, etc? or should i use the Regexp, or
string.Replace functions?
Cheers
Chris
3  1528 
It depends on the db. Generally, you can simply replace single quotes with
doubled single quotes to escape them.
--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.
"Chris" <ch***@no-spam.tuxweb.org> wrote in message
news:10*************@corp.supernews.com... Hey,
What are the usual ways to encode a sql string for safe insertion into the
db? Are there
handy functions like php's addslashes, etc? or should i use the Regexp, or
string.Replace functions?
Cheers
Chris
Hi Chris,
You probably should be using SQLParameters which takes care of all encoding
as well as pretty much doing away with Sql Injection problems.
+++ Rick ---
--
Rick Strahl
West Wind Technologies http://www.west-wind.com/ http://www.west-wind.com/weblog/
----------------------------------
Making waves on the Web
"Chris" <ch***@no-spam.tuxweb.org> wrote in message
news:10*************@corp.supernews.com... Hey,
What are the usual ways to encode a sql string for safe insertion into the
db? Are there
handy functions like php's addslashes, etc? or should i use the Regexp, or
string.Replace functions?
Cheers
Chris
Chris wrote: What are the usual ways to encode a sql string for safe insertion into the
db? Are there
handy functions like php's addslashes, etc? or should i use the Regexp, or
string.Replace functions?
Chris, use a parameterized query, like:
string SQL = "SELECT * FROM TableName WHERE Foo = @Bar";
Note the @Bar is a parameter. Then, you can set a value for the
parameter by adding a SqlParameter or OleDbParameter instance to the
Command object's Parameters collection.
--
Scott Mitchell mi******@4guysfromrolla.com http://www.4GuysFromRolla.com http://www.ASPFAQs.com http://www.ASPMessageboard.com
* When you think ASP, think 4GuysFromRolla.com! This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: Christopher H. Laco |
last post by:
Long story longer. I need to get web user input into a backend system
that a) only grocks single byte encoding, b) expectes the data transer
to be 1 bytes = 1 character, and c) uses the HP Roman-6...
|
by: Demon News |
last post by:
I'm trying to do a transform (Using XmlTransform class in c#) and in the
Transform I'm specifying the the output xsl below:
<xsl:output method="xml" encoding="UTF-8" indent="no"/>
the...
|
by: fitsch |
last post by:
Hi,
I am trying to write a generic RSS/Atom/OPML feed client. The problem
is, that those xml feeds may have different encodings:
- <?xml version="1.0" encoding="ISO-8859-1" ?>...
- <?xml...
|
by: Martin Smith |
last post by:
How can I stop ASP.NET Encoding things automatically?
e.g if I create a button in my code and add the following attribute
objNewButton.Attributes.Add("onClick",...
|
by: Tim_Mac |
last post by:
hi,
i have a group of individual radio buttons that i am running some
client-side code on for the onClick event. there is a URL generated by
a code block inside the onClick attribute. the...
|
by: Chris McDonough |
last post by:
ElementTree's XML serialization routine implied by tree._write(file,
node, encoding, namespaces looks like this (elided):
def _write(self, file, node, encoding, namespaces):
# write XML to file...
|
by: Christina |
last post by:
Hey Guys,
Currently, I am using the below code:
Dim oReqDoc as XmlDocument
Dim requiredBytes As Byte()
requiredBytes =
System.Text.UTF8Encoding.UTF8.GetBytes(oReqDoc.InnerXml).
Here, I am...
|
by: mortb |
last post by:
1. How do I determine which encoding a xmldocument or xmlreader uses when
opening a document?
I'm not just talking about the <?xml encoding="utf-8"?attribute, but the
actual encoding of the...
|
by: ujjwaltrivedi |
last post by:
Hey guys,
Can anyone tell me how to create a text file with Unicode Encoding. In
am using
FileStream Finalfile = new FileStream("finalfile.txt",
FileMode.Append, FileAccess.Write);
...
|
by: Sonnysonu |
last post by:
This is the data of csv file
1 2 3
1 2 3
1 2 3
1 2 3
2 3
2 3
3
the lengths should be different i have to store the data by column-wise with in the specific length.
suppose the i have to...
|
by: Hystou |
last post by:
There are some requirements for setting up RAID:
1. The motherboard and BIOS support RAID configuration.
2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
| | |
