Preventing SQL Injection in dynamic SQL
255
How can I prevent SQL injection in PHP?
12867
How can I protect MySQL username and password from decompiling?
2419
SQL Server Escape an Underscore
561
How to log error details when using using try/catch for dynamic SQL backup commands
74188
How can I avoid SQL injection attacks in my ASP.NET application?
74406
SQL injection that gets around mysql_real_escape_string()
13858
Being that string substitution is frowned upon with forming SQL queries, how do you assign the table name dynamically?
158945
Set database name dynamically in SQL Server stored procedure?
107307
Can I protect against SQL injection by escaping single-quote and surrounding user input with single-quotes?
142073
Can I pass column name as input parameter in SQL stored Procedure
53985
Select into table in another database that is password protected?
33700
Stop SQL query execution from .net Code
30567
Is it appropriate to down-vote posts containing SQL injection vulnerabilities?
53226
Using single quote by curly braces in String.format in Dynamic SOQL
62976
Concatenating a string and primary key Id while inserting
7754
At which point does SQL Server validate data for insertion
113547
How do I demonstrate a Second Order SQL Injection?