query: how to prepare sql statements to avoid sql injections
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 122816
negative_passages.text: SQL injection with php filtering
negative_passages.docid: 104601
negative_passages.text: PDO binding values for MySQL IN statement
negative_passages.docid: 121058
negative_passages.text: SQL LIKE query failing - fatal error in prepared statement
negative_passages.docid: 8240
negative_passages.text: How to secure database passwords in PHP?
negative_passages.docid: 41308
negative_passages.text: Does Python support MySQL prepared statements?
negative_passages.docid: 29405
negative_passages.text: What is SQL injection?
negative_passages.docid: 101638
negative_passages.text: How do I make sure that values from MySQL keep their type in PHP?
negative_passages.docid: 34378
negative_passages.text: How does Java's PreparedStatement work?
negative_passages.docid: 2787
negative_passages.text: Multiple mysql INSERT statements in one query php
negative_passages.docid: 108153
negative_passages.text: Preparing a MySQL INSERT/UPDATE statement with DEFAULT values
negative_passages.docid: 3855
negative_passages.text: PreparedStatement IN clause alternatives?
negative_passages.docid: 158241
negative_passages.text: Will using LINQ to SQL help prevent SQL injection
negative_passages.docid: 149657
negative_passages.text: Alternative to mysql_real_escape_string without connecting to DB
negative_passages.docid: 125717
negative_passages.text: Is there a way to execute SQL statement based on SQL Server version?
negative_passages.docid: 74188
negative_passages.text: How can I avoid SQL injection attacks in my ASP.NET application?
negative_passages.docid: 13858
negative_passages.text: Being that string substitution is frowned upon with forming SQL queries, how do you assign the table name dynamically?