April 2017
Intermediate to advanced
628 pages
13h 46m
English
By creating a parameterized SQL query, the compiler correctly substitutes the arguments before running the SQL statement against the database. It will prevent malicious data changing your SQL statement in order to exact a malicious result. This is because the SqlCommand object does not directly insert the parameter values into the statement.
To sum it all up, using parameterized stored procedures means no more Little Bobby Tables.
Read now
Unlock full access