Browse by Tags

All Tags » SQL Injection (RSS)

Using "Like" operator in parameterized queries by mlife

As you know parameterized queries has two benefit against regular queries . First for preventing of some SQL injection attacks and second take advantages of query plan caching. One simple example is like this. string command = "Select FirstName from UsersTable...
More Posts