|
hessfirm -> RE: SQL Injection (6/10/2008 23:05:32)
|
Thanks!
so then in the following scenario, what is the difference btwn (strText) below and (TextIn) in the bottom example?
<%public function fSanitize(strText)
replace (strText, "'", "''")
replace (strText, ";", ",")
replace (strText, "(", "")
replace (strText, ")", "")
replace (strText, "=", "")
replace (strText, "xp_", "")
replace (strText, "/*", "")
replace (strText, "*/", "")
replace (strText, "--", "")
End Function%>
and this...
<%
Function StripQuote(TextIn)
TextIn = Replace(TextIn,"'","''")
StripQuote = TextIn
End Function
myVariable = StripQuote(Request.form("myTextField"))
%>
|
|
|
|
