Click here to Skip to main content
15,891,316 members
Home / Discussions / C#
   

C#

 
GeneralRe: Formatting a number and digits of precision Pin
csharpsucks7-Nov-18 4:32
csharpsucks7-Nov-18 4:32 
GeneralRe: Formatting a number and digits of precision Pin
Richard Deeming7-Nov-18 4:38
mveRichard Deeming7-Nov-18 4:38 
GeneralRe: Formatting a number and digits of precision Pin
OriginalGriff7-Nov-18 4:44
mveOriginalGriff7-Nov-18 4:44 
GeneralRe: Formatting a number and digits of precision Pin
csharpsucks7-Nov-18 6:08
csharpsucks7-Nov-18 6:08 
GeneralRe: Formatting a number and digits of precision Pin
OriginalGriff7-Nov-18 6:28
mveOriginalGriff7-Nov-18 6:28 
GeneralRe: Formatting a number and digits of precision Pin
csharpsucks7-Nov-18 6:44
csharpsucks7-Nov-18 6:44 
QuestionProblem at inserting a DB entry Pin
User 136751145-Nov-18 23:49
User 136751145-Nov-18 23:49 
AnswerRe: Problem at inserting a DB entry Pin
OriginalGriff6-Nov-18 0:08
mveOriginalGriff6-Nov-18 0:08 
Not like that! Never concatenate strings to build a SQL command. It leaves you wide open to accidental or deliberate SQL Injection attack which can destroy your entire database. Always use Parameterized queries instead.

When you concatenate strings, you cause problems because SQL receives commands like:
SQL
SELECT * FROM MyTable WHERE StreetAddress = 'Baker's Wood'
The quote the user added terminates the string as far as SQL is concerned and you get problems. But it could be worse. If I come along and type this instead: "x';DROP TABLE MyTable;--" Then SQL receives a very different command:
SQL
SELECT * FROM MyTable WHERE StreetAddress = 'x';DROP TABLE MyTable;--'
Which SQL sees as three separate commands:
SQL
SELECT * FROM MyTable WHERE StreetAddress = 'x';
A perfectly valid SELECT
SQL
DROP TABLE MyTable;
A perfectly valid "delete the table" command
SQL
--'
And everything else is a comment.
So it does: selects any matching rows, deletes the table from the DB, and ignores anything else.

So ALWAYS use parameterized queries! Or be prepared to restore your DB from backup frequently. You do take backups regularly, don't you?
Sent from my Amstrad PC 1640
Never throw anything away, Griff
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!

GeneralRe: Problem at inserting a DB entry Pin
User 136751146-Nov-18 3:12
User 136751146-Nov-18 3:12 
GeneralRe: Problem at inserting a DB entry Pin
Luc Pattyn6-Nov-18 3:51
sitebuilderLuc Pattyn6-Nov-18 3:51 
AnswerRe: Problem at inserting a DB entry Pin
tranthanhtu.vn6-Nov-18 18:12
professionaltranthanhtu.vn6-Nov-18 18:12 
RantRe: Problem at inserting a DB entry Pin
Richard Deeming7-Nov-18 0:59
mveRichard Deeming7-Nov-18 0:59 
AnswerRe: Problem at inserting a DB entry Pin
tranthanhtu.vn7-Nov-18 1:27
professionaltranthanhtu.vn7-Nov-18 1:27 
RantRe: Problem at inserting a DB entry Pin
Richard Deeming7-Nov-18 1:32
mveRichard Deeming7-Nov-18 1:32 
AnswerRe: Problem at inserting a DB entry Pin
tranthanhtu.vn7-Nov-18 1:36
professionaltranthanhtu.vn7-Nov-18 1:36 
GeneralRe: Problem at inserting a DB entry Pin
Eddy Vluggen7-Nov-18 1:44
professionalEddy Vluggen7-Nov-18 1:44 
AnswerRe: Problem at inserting a DB entry Pin
tranthanhtu.vn7-Nov-18 2:29
professionaltranthanhtu.vn7-Nov-18 2:29 
GeneralRe: Problem at inserting a DB entry Pin
Eddy Vluggen7-Nov-18 2:37
professionalEddy Vluggen7-Nov-18 2:37 
AnswerRe: Problem at inserting a DB entry Pin
tranthanhtu.vn7-Nov-18 2:42
professionaltranthanhtu.vn7-Nov-18 2:42 
QuestionCorrelation of several multi-track charts in C# Pin
Member 133258465-Nov-18 19:13
Member 133258465-Nov-18 19:13 
Question[solved] GuidAttribute Pin
Super Lloyd5-Nov-18 2:29
Super Lloyd5-Nov-18 2:29 
QuestionCreating & writing to a text file from two different forms Pin
Member 140427683-Nov-18 9:45
Member 140427683-Nov-18 9:45 
AnswerRe: Creating & writing to a text file from two different forms Pin
Dave Kreskowiak3-Nov-18 10:06
mveDave Kreskowiak3-Nov-18 10:06 
GeneralRe: Creating & writing to a text file from two different forms Pin
Member 140427684-Nov-18 4:03
Member 140427684-Nov-18 4:03 
GeneralRe: Creating & writing to a text file from two different forms Pin
Eddy Vluggen4-Nov-18 4:15
professionalEddy Vluggen4-Nov-18 4:15 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.