Click here to Skip to main content
15,914,109 members
Home / Discussions / Visual Basic
   

Visual Basic

 
GeneralRe: Services Pin
pittuck15-Jun-05 20:55
pittuck15-Jun-05 20:55 
GeneralRe: Services Pin
KaptinKrunch16-Jun-05 5:12
KaptinKrunch16-Jun-05 5:12 
Generalsql2000 / image / ado Pin
erikkl200015-Jun-05 6:58
erikkl200015-Jun-05 6:58 
GeneralRe: sql2000 / image / ado Pin
Dave Kreskowiak15-Jun-05 7:31
mveDave Kreskowiak15-Jun-05 7:31 
GeneralAuto Complete Combobox problems... Pin
jake07215-Jun-05 5:18
jake07215-Jun-05 5:18 
GeneralRe: Auto Complete Combobox problems... Pin
LordLothar15-Jun-05 6:20
LordLothar15-Jun-05 6:20 
GeneralSilly Question - Handling a single quote while writing a query in vb.net Pin
prathiba_naresh15-Jun-05 5:00
prathiba_naresh15-Jun-05 5:00 
GeneralRe: Silly Question - Handling a single quote while writing a query in vb.net Pin
Dave Kreskowiak15-Jun-05 7:27
mveDave Kreskowiak15-Jun-05 7:27 
This has has been gone over about a thousand times in the forums...

The simple way to fix it is to NOT use string concatenation to build your SQL statements. Doing this just opens you up to all kinds of problems and attacks. Always use parameterized queries, unless ABSOLUTELY necessary. The parameter objects will escape any bad characters, like the problem your having, and also check for attacks embedded in the parameters that could damage the database.

You can check out a couple of examples here[^], and here[^].


RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome

GeneralRe: Silly Question - Handling a single quote while writing a query in vb.net Pin
Mitch F.15-Jun-05 13:59
Mitch F.15-Jun-05 13:59 
GeneralRe: Silly Question - Handling a single quote while writing a query in vb.net Pin
prathiba_naresh22-Jun-05 5:23
prathiba_naresh22-Jun-05 5:23 
GeneralFilelistbox Pin
JimClark6815-Jun-05 4:17
JimClark6815-Jun-05 4:17 
GeneralRe: Filelistbox Pin
Dave Kreskowiak15-Jun-05 4:22
mveDave Kreskowiak15-Jun-05 4:22 
GeneralRe: Filelistbox Pin
JimClark6815-Jun-05 5:29
JimClark6815-Jun-05 5:29 
GeneralRe: Filelistbox Pin
Dave Kreskowiak15-Jun-05 7:18
mveDave Kreskowiak15-Jun-05 7:18 
Generaldatagrid problem Pin
nickc115-Jun-05 2:50
sussnickc115-Jun-05 2:50 
Generalpopulate dropdownlist Pin
Manik Nath14-Jun-05 22:45
Manik Nath14-Jun-05 22:45 
GeneralRe: populate dropdownlist Pin
syed saba14-Jun-05 23:40
syed saba14-Jun-05 23:40 
GeneralRe: populate dropdownlist Pin
CalaLily15-Jun-05 3:47
CalaLily15-Jun-05 3:47 
GeneralRe: populate dropdownlist Pin
15-Jun-05 19:34
suss15-Jun-05 19:34 
GeneralProblem with Dhtmledit control Pin
Anonymous14-Jun-05 21:48
Anonymous14-Jun-05 21:48 
GeneralRe: Problem with Dhtmledit control Pin
Dave Kreskowiak15-Jun-05 3:49
mveDave Kreskowiak15-Jun-05 3:49 
QuestionDhtmledit syntax ? Pin
Anonymous14-Jun-05 21:11
Anonymous14-Jun-05 21:11 
QuestionHow to develop a irc chat in asp.net Pin
veeri14-Jun-05 19:32
veeri14-Jun-05 19:32 
AnswerRe: How to develop a irc chat in asp.net Pin
Christian Graus14-Jun-05 23:52
protectorChristian Graus14-Jun-05 23:52 
GeneralRe: How to develop a irc chat in asp.net Pin
Anonymous16-Jun-05 19:51
Anonymous16-Jun-05 19:51 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.