query: What are good ways to prevent SQL injection?
positive_passages.docid: 10136
positive_passages.text: How can I add user-supplied input to an SQL statement?
negative_passages.docid: 139754
negative_passages.text: How do I escape a single quote in SQL Server?
negative_passages.docid: 102000
negative_passages.text: Best way to defend against mysql injection and cross site scripting
negative_passages.docid: 95323
negative_passages.text: Is there an equivalent of PHP's mysql_real_escape_string() for Perl's DBI?
negative_passages.docid: 151556
negative_passages.text: Escaping MySQL wild cards
negative_passages.docid: 73978
negative_passages.text: Prevent SOQL Injection in Your Code
negative_passages.docid: 54520
negative_passages.text: What are the best practices for avoiding xss attacks in a PHP site
negative_passages.docid: 698
negative_passages.text: mysqli or PDO - what are the pros and cons?
negative_passages.docid: 129686
negative_passages.text: Throw an error preventing a table update in a MySQL trigger
negative_passages.docid: 84489
negative_passages.text: PDO: Passing extra parameters to a prepared statment than needed
negative_passages.docid: 23736
negative_passages.text: How to avoid echoing character 65279 in php?
negative_passages.docid: 85849
negative_passages.text: Can I use a PDO prepared statement to bind an identifier (a table or field name) or a syntax keyword?
negative_passages.docid: 60295
negative_passages.text: Script breaking below MySQL queries, but no error being given?
negative_passages.docid: 33733
negative_passages.text: How do I create a parameterized SQL query? Why Should I?
negative_passages.docid: 149041
negative_passages.text: Why is PDO better for escaping MySQL queries/querystrings than mysql_real_escape_string?
negative_passages.docid: 113547
negative_passages.text: How do I demonstrate a Second Order SQL Injection?
negative_passages.docid: 62437
negative_passages.text: How do I safely "eval" user code in a webpage?