Loading

User input validation

chinedu Nwankwo

Hi please i want to be able to enter values into a textbox, the textbox is for taking in comments, in all laguages meaning i should be able to allow special characters , this comment goes into a field in the database with text type

how do i achieve this without compromizing security or even crashing the application ?

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Wim Sturkenboom12y ago
Accepted answer
Reconsider the use of the text type; it's deprecated in MSSQL server. You might be better of with nvarchar(MAX).

Further to keep it safe, use parameter queries. This will make sure that the data is treated as data and not as part of the sql statement and hence prevents sql injection.