Click here to Skip to main content
15,924,193 members
Home / Discussions / Visual Basic
   

Visual Basic

 
QuestionHow to save ?? Pin
get12061-Oct-07 5:02
get12061-Oct-07 5:02 
AnswerRe: How to save ?? Pin
Dave Kreskowiak1-Oct-07 5:22
mveDave Kreskowiak1-Oct-07 5:22 
QuestionXml serilization of controls properties to save and get Pin
get12061-Oct-07 4:50
get12061-Oct-07 4:50 
AnswerRe: Xml serilization of controls properties to save and get Pin
Dave Kreskowiak1-Oct-07 5:17
mveDave Kreskowiak1-Oct-07 5:17 
QuestionI hate Combo Box Pin
fazeepk1-Oct-07 4:13
fazeepk1-Oct-07 4:13 
AnswerRe: I hate Combo Box Pin
Dave Kreskowiak1-Oct-07 5:48
mveDave Kreskowiak1-Oct-07 5:48 
QuestionINSERT INTO Query with apostrophes in filenames? Pin
eyeball_20031-Oct-07 3:52
eyeball_20031-Oct-07 3:52 
AnswerRe: INSERT INTO Query with apostrophes in filenames? Pin
Dave Kreskowiak1-Oct-07 4:13
mveDave Kreskowiak1-Oct-07 4:13 
This is the problem with using string concantenation to build SQL queries. You open yourself up to SQL Injection attacks and you have to write a bunch of extra code to handle all the things a user can do to screw up your query.

Read this article[^] by Colin Angus Mackey and you'll understand why what you're doing is a bad idea.

Convert this to a parameterized query and you'll solve your immediate problem, without writing a ton of code to handle character escapes.


A guide to posting questions on CodeProject[^]

Dave Kreskowiak
Microsoft MVP
Visual Developer - Visual Basic
     2006, 2007


AnswerRe: INSERT INTO Query with apostrophes in filenames? Pin
eyeball_20031-Oct-07 5:27
eyeball_20031-Oct-07 5:27 
GeneralRe: INSERT INTO Query with apostrophes in filenames? Pin
Dave Kreskowiak1-Oct-07 5:48
mveDave Kreskowiak1-Oct-07 5:48 
AnswerRe: INSERT INTO Query with apostrophes in filenames? Pin
Guffa1-Oct-07 6:32
Guffa1-Oct-07 6:32 
GeneralRe: INSERT INTO Query with apostrophes in filenames? Pin
eyeball_20031-Oct-07 7:16
eyeball_20031-Oct-07 7:16 
AnswerRe: INSERT INTO Query with apostrophes in filenames? Pin
mmelick1-Oct-07 10:34
mmelick1-Oct-07 10:34 
Questiondatagridview ? Pin
moomoooomoo1-Oct-07 3:47
moomoooomoo1-Oct-07 3:47 
AnswerRe: datagridview ? Pin
Dave Kreskowiak1-Oct-07 4:10
mveDave Kreskowiak1-Oct-07 4:10 
GeneralRe: datagridview ? Pin
moomoooomoo1-Oct-07 4:21
moomoooomoo1-Oct-07 4:21 
GeneralRe: datagridview ? Pin
Dave Kreskowiak1-Oct-07 5:46
mveDave Kreskowiak1-Oct-07 5:46 
QuestionCurrent user input language Pin
Proqrammer1-Oct-07 3:15
Proqrammer1-Oct-07 3:15 
AnswerRe: Current user input language Pin
Gary Bigman1-Oct-07 5:14
Gary Bigman1-Oct-07 5:14 
QuestionCommunication between dlls Pin
Jens Johanneson1-Oct-07 2:58
Jens Johanneson1-Oct-07 2:58 
AnswerRe: Communication between dlls Pin
Dave Kreskowiak1-Oct-07 4:07
mveDave Kreskowiak1-Oct-07 4:07 
GeneralRe: Communication between dlls Pin
Jens Johanneson1-Oct-07 7:14
Jens Johanneson1-Oct-07 7:14 
GeneralRe: Communication between dlls Pin
Dave Kreskowiak1-Oct-07 12:00
mveDave Kreskowiak1-Oct-07 12:00 
QuestionResizing a form to suit the resolution Pin
Mr Oizo1-Oct-07 1:23
Mr Oizo1-Oct-07 1:23 
AnswerRe: Resizing a form to suit the resolution Pin
Christian Graus1-Oct-07 1:30
protectorChristian Graus1-Oct-07 1:30 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.