sql injection all tables, How to Prevent?

krishan kumar singh

12y2.3k.NET

Dear Sir,

Sql injection happen in our website and i used store procedure. but happen this problem and that inject all database table of varchar and nvarchar columns.

</title>

States have been around http://paydayloansforsure.com >24 hour payday loan even thousands of people.

Please help and suggest me what i do?

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Guest User12y ago
I use PetaPoco ORM for SQL and stored procs, and it takes care of SQL injection, e.g.,
```
var id=123;
var a=db.Query(PetaPoco.Sql.Builder
    .Append("SELECT * FROM articles")
    .Append("WHERE article_id=@0", id)
    .Append("AND date_created<@0", DateTime.UtcNow)
)
```
http://www.toptensoftware.com/petapoco/

here i'm passing say ID as parameter and not like
"="+id