Member Avatar for mohammad1359
mohammad1359 0 Newbie Poster

example string:
/* hack */
string SQLSTR="SELECT * from pass where username="+"'"+textBox1.Text+"'"+"and password="+"'"+textBox2.Text+"'";
best war for in message is:
/* not hack */
string SQLSTR=string.Format("select * from pass where username='{0}' and password='{1}'",textBox1.Text,textBox2.Text);

  • 1 Contributor
  • 0 Replies
  • 37 Views
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.