query: Could SQL injection be performed in this case?
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 102000
negative_passages.text: Best way to defend against mysql injection and cross site scripting
negative_passages.docid: 113547
negative_passages.text: How do I demonstrate a Second Order SQL Injection?
negative_passages.docid: 107510
negative_passages.text: PDO bindParam vs. execute
negative_passages.docid: 74263
negative_passages.text: How to use string variable in sql statement
negative_passages.docid: 39060
negative_passages.text: Classic ASP SQL Injection Protection
negative_passages.docid: 157063
negative_passages.text: Some part of your SQL statement is nested too deeply. Rewrite the query or break it up into smaller queries
negative_passages.docid: 115431
negative_passages.text: What is the order of execution for this SQL statement
negative_passages.docid: 53797
negative_passages.text: mysqli prepared statements, insert NULL using bind params
negative_passages.docid: 32000
negative_passages.text: PDO - passing a field name as a variable
negative_passages.docid: 38732
negative_passages.text: How does the SQL injection from the "Bobby Tables" XKCD comic work?
negative_passages.docid: 84489
negative_passages.text: PDO: Passing extra parameters to a prepared statment than needed
negative_passages.docid: 62517
negative_passages.text: Bind multiple parameters into mysqli query
negative_passages.docid: 36268
negative_passages.text: Insert multiple rows WITHOUT repeating the "INSERT INTO ..." part of the statement?
negative_passages.docid: 149041
negative_passages.text: Why is PDO better for escaping MySQL queries/querystrings than mysql_real_escape_string?
negative_passages.docid: 16324
negative_passages.text: How does a PreparedStatement avoid or prevent SQL injection?
negative_passages.docid: 142073
negative_passages.text: Can I pass column name as input parameter in SQL stored Procedure