c# - SQLite injection with list of strings -

-

Can someone tell me that to prevent SQL injection on SQLite creating questions Where is a method where in the section a "myval IN (string_1, ..., string_n)" condition?

Although I'm dynamically creating and adding command text with annotations, is there an easy way to get those annotation parameters from the string list?

Thank you.

No, there is no easy way. Do not create a list of hazardous characters. Use the command with parameters. (Var command = conn.CreateCommand ()) (using conn.Open ()) using conv = new SQLiteconnection (connectionString) 

  command. Command. Command Text: "Choose names from persons where id = @id"; Command. Parameter. Advant Value ("@ id", 5); {Reader.Read ()} {}}}
while using Var reader = command.ExecuteReader ())

Comments

Post a Comment

Popular posts from this blog

asp.net - Change the driver in the connection string to a data source in VB.Net -

-
I have a code that has a driver in a connection string. as a slow string = "driver = {SQL Server}; server = xxx \ SQLEXPRESS; database = dbRegister; reliable connection = yes" I need to change it: data source = 1.2.3.4; User ID = xx; Password = xxxxx; Initial list = xxxxx; Connect timeout = 30 " When I change text, it returns this error: [microsoft] [ ODBC] Driver Manager] The name of the data source was not found and no default driver specified How do I declare a data source? myServerAddress; Initial Catalog = myDataBase; User id = myUsername; Password = myPassword; Use the server name \ example to connect to the specific SQL Server instance as the data source. Are you using SQL Server 2005 Express? Server name syntax does not remember Servername \ SQLEXPRESS Visit P>
Read more

objective c - iPhone and it's wireless area -

-
Is this a way to find other iPhones in the category of wireless areas? So I give an example. I'm staying at the airport somewhere I have an iPhone too. I and the other iPhone owners are playing the same game. Is there any way to warn me and the other player that we are close to each other? Does this work even if we are not on the same wireless network, or there is no wireless? And if there is any way to do this, can you give me some starting point? Like a link where I can learn something like this or maybe this is probably the name of this process, because I do not know how to search about this topic in Google. Thanks in advance! Can be completed with peer-to-peer discovery and connectivity you are describing Game Kit Framework Originally I thought it works only through Bluetooth, but after watching it immediately, it seems that WiFi is also supported. Hope it helps!
Read more

unix - Listing all shared memory segments used by a process on AIX5.3+ -

-
I would like to find all the shared memory segments used by a given process I am particularly interested in detecting shmid That's why I can use it in call (shmctl). On Solaris I will just read / proc / $ PID / map to find that information (field pr_shmid) The content of that file is defined by struct prmap_t in the sys / procfs format. Ax also has a / proc / $ PID / map file. Any project is a primate, but unfortunately it has been projected in pr_shmid field. Any ideas how can I get it on AIX5.3 +? I do not particularly know about AX, but I think that ipcs command is quite standard where SysV IPC is supported, so I want to get the ipcs -m command to give the appropriate code; If you can not find a better method, then there may be an option to parse its output.
Read more