sql injection RSS

• • Reply
  

  hans_v

  All-Star

  35986 Points

  6550 Posts

  Re: sql injection

  Jul 10, 2012 08:11 AM|LINK

  Decker Dong - MSFT

  Check this if I understand you right……

  Console.WriteLine(string.Format("select * from Tablename where id = {0}","1;drop table XXX"));

  This will cause an error, since Access doesn't support batched statements.

• • Reply
  

  Decker Dong ...

  All-Star

  118619 Points

  18779 Posts

  Re: sql injection

  Jul 10, 2012 08:15 AM|LINK

  hans_v

  hans_v

  thanks

  • Edited by decker dong - msft on Jul 10, 2012 08:16 AM