query: Preventing SQL Injection: How do I make this query injection proof
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 102000
negative_passages.text: Best way to defend against mysql injection and cross site scripting
negative_passages.docid: 53797
negative_passages.text: mysqli prepared statements, insert NULL using bind params
negative_passages.docid: 84489
negative_passages.text: PDO: Passing extra parameters to a prepared statment than needed
negative_passages.docid: 38093
negative_passages.text: ignoring mysql fulltext stopwords in query
negative_passages.docid: 9385
negative_passages.text: How do you do multiple SQL statements in one mysql_query?
negative_passages.docid: 26247
negative_passages.text: How to use an user variables in MySQL LIKE clause?
negative_passages.docid: 95323
negative_passages.text: Is there an equivalent of PHP's mysql_real_escape_string() for Perl's DBI?
negative_passages.docid: 4595
negative_passages.text: How do I create a PDO parameterized query with a LIKE statement?
negative_passages.docid: 10136
negative_passages.text: How can I add user-supplied input to an SQL statement?
negative_passages.docid: 9067
negative_passages.text: How to execute two mysql queries as one in PHP/MYSQL?
negative_passages.docid: 146943
negative_passages.text: PHP/MySQL insert row then get 'id'
negative_passages.docid: 22026
negative_passages.text: Single SQL query required
negative_passages.docid: 115240
negative_passages.text: How do I test an application for SQL injections?
negative_passages.docid: 36792
negative_passages.text: How to escape strings in SQL Server using PHP?
negative_passages.docid: 149657
negative_passages.text: Alternative to mysql_real_escape_string without connecting to DB
negative_passages.docid: 42641
negative_passages.text: first iteration of sql query not being wrapped properly