SQL injection even when the variable is escaped
255
How can I prevent SQL injection in PHP?
13858
Being that string substitution is frowned upon with forming SQL queries, how do you assign the table name dynamically?
149041
Why is PDO better for escaping MySQL queries/querystrings than mysql_real_escape_string?
39060
Classic ASP SQL Injection Protection
89369
Bind variable with dotted name not working in dynamic SOQL
116149
JSON and escaped double quote
132438
How to select from MySQL where Table name is Variable
55002
What is the correct syntax for using Database.ExecuteSqlCommand with parameters?
149657
Alternative to mysql_real_escape_string without connecting to DB
123619
Shouldn't mysql_real_escape_string() leave slashes in Database?
6235
Is SQL syntax case sensitive?
139754
How do I escape a single quote in SQL Server?
102000
Best way to defend against mysql injection and cross site scripting
158241
Will using LINQ to SQL help prevent SQL injection
88999
Escaped characters in string from submitted form
73978
Prevent SOQL Injection in Your Code
10136
How can I add user-supplied input to an SQL statement?