Click here to Skip to main content
16,008,490 members
Home / Discussions / Visual Basic
   

Visual Basic

 
GeneralRe: Larger Form Pin
abhi20089-May-05 21:27
abhi20089-May-05 21:27 
GeneralRe: Larger Form Pin
Robert Rohde10-May-05 4:13
Robert Rohde10-May-05 4:13 
Generalparameterized query Pin
vaiology9-May-05 16:59
vaiology9-May-05 16:59 
GeneralRe: parameterized query Pin
Christian Graus9-May-05 17:41
protectorChristian Graus9-May-05 17:41 
GeneralRe: parameterized query Pin
vaiology9-May-05 17:53
vaiology9-May-05 17:53 
GeneralRe: parameterized query Pin
Christian Graus9-May-05 17:55
protectorChristian Graus9-May-05 17:55 
GeneralRe: parameterized query Pin
vaiology9-May-05 19:15
vaiology9-May-05 19:15 
GeneralRe: parameterized query Pin
Colin Angus Mackay9-May-05 20:44
Colin Angus Mackay9-May-05 20:44 
Christian Graus wrote:
string.Format("SELECT studno, studlastname, studfirstname, studmiddlename FROM students WHERE(studno = {0}", nStudNo)

WTF | :WTF: Christian, I expected better of you! You might want to ready my article on SQL Injection Attacks and Tips on How to Prevent Them[^] Poke tongue | ;-P

Access does support parameterised queries, if not Stored Procedures. Big Grin | :-D

[EDIT]
Actually, given that nStudNo is most likely an integer type then it is unlikely to be a viable target for an injection attack - but getting into the habit not inserting values like this means just not having to second guess what is going to open up a security hole and what is not.
[/EDIT]


My: Blog | Photos | Next SQL Presentation
WDevs.com - Open Source Code Hosting, Blogs, FTP, Mail and More


GeneralRe: parameterized query Pin
Christian Graus10-May-05 12:46
protectorChristian Graus10-May-05 12:46 
GeneralUsing vb .Net Pin
suis9-May-05 8:03
suis9-May-05 8:03 
GeneralRe: Using vb .Net Pin
Christian Graus9-May-05 11:49
protectorChristian Graus9-May-05 11:49 
GeneralUsing VB .Net Pin
suis9-May-05 8:01
suis9-May-05 8:01 
GeneralPrecision of variables Pin
john john mackey9-May-05 6:38
john john mackey9-May-05 6:38 
GeneralRe: Precision of variables Pin
Adam °Wimsatt9-May-05 8:27
Adam °Wimsatt9-May-05 8:27 
GeneralRe: Precision of variables Pin
Dave Kreskowiak9-May-05 8:35
mveDave Kreskowiak9-May-05 8:35 
GeneralRe: Precision of variables Pin
john john mackey10-May-05 7:16
john john mackey10-May-05 7:16 
QuestionHow to use Regular Expressions ? Pin
vishalmishra9-May-05 6:21
vishalmishra9-May-05 6:21 
AnswerRe: How to use Regular Expressions ? Pin
Ray Cassick9-May-05 6:46
Ray Cassick9-May-05 6:46 
QuestionHow to copy to clipboard...? Pin
R.Nisha9-May-05 0:26
R.Nisha9-May-05 0:26 
AnswerRe: How to copy to clipboard...? Pin
rsomasundar9-May-05 2:11
rsomasundar9-May-05 2:11 
GeneralGIF Images in Ms Access Pin
Anonymous9-May-05 0:12
Anonymous9-May-05 0:12 
GeneralRe: GIF Images in Ms Access Pin
Christian Graus9-May-05 12:26
protectorChristian Graus9-May-05 12:26 
GeneralNeed help with Arrays! Pin
joseuri218-May-05 21:41
joseuri218-May-05 21:41 
GeneralRe: Need help with Arrays! Pin
Robert Rohde8-May-05 22:09
Robert Rohde8-May-05 22:09 
GeneralRe: Need help with Arrays! Pin
joseuri219-May-05 5:15
joseuri219-May-05 5:15 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.