query: How can this sql query be injected?
positive_passages.docid: 38732
positive_passages.text: How does the SQL injection from the "Bobby Tables" XKCD comic work?
negative_passages.docid: 151949
negative_passages.text: Using OPENQUERY to execute a script
negative_passages.docid: 90688
negative_passages.text: How do I use SQL's GETDATE() and DATEADD() in a Linq to SQL expression?
negative_passages.docid: 158241
negative_passages.text: Will using LINQ to SQL help prevent SQL injection
negative_passages.docid: 26247
negative_passages.text: How to use an user variables in MySQL LIKE clause?
negative_passages.docid: 123990
negative_passages.text: Cannot issue data manipulation statements with executeQuery()
negative_passages.docid: 63897
negative_passages.text: How do I return a new IDENTITY column value from an SQLServer SELECT statement?
negative_passages.docid: 103679
negative_passages.text: Can not issue data manipulation statements with executeQuery()
negative_passages.docid: 4236
negative_passages.text: The equivalent of SQLServer function SCOPE_IDENTITY() in mySQL?
negative_passages.docid: 73978
negative_passages.text: Prevent SOQL Injection in Your Code
negative_passages.docid: 33733
negative_passages.text: How do I create a parameterized SQL query? Why Should I?
negative_passages.docid: 84151
negative_passages.text: How to edit this mssql query?
negative_passages.docid: 66359
negative_passages.text: Get the actual query executed by a view
negative_passages.docid: 132935
negative_passages.text: Does LINQ's ExecuteCommand provide protection from SQL injection attacks?
negative_passages.docid: 107307
negative_passages.text: Can I protect against SQL injection by escaping single-quote and surrounding user input with single-quotes?
negative_passages.docid: 75027
negative_passages.text: Why is using a mysql prepared statement more secure than using the common escape functions?
negative_passages.docid: 60773
negative_passages.text: Can I parameterize the table name in a prepared statement?