By MrBoolUS
via mrbool.com
Published: Oct 05 2012 / 11:04
One should make use of the parameters instead of dynamically building a string in a query. Any text that you enter into a parameter will be treated as field data. This is not considered a part of the SQL statement and makes your application much more secure. Hope this text can help anyone.
Add your comment