weatherwax
Programmer
problems can arise when user input contains apostrophes (" '). Normal advice is to use the replace function in ASP.
A friend of mine told me that if I forward the user input with the parameter collection to my stored procedures, the system takes care of this automatically.
Is this true ?
What other special characters beside these 2 can cause harm?
thank you (tried to search the forum, but the search was in maintenance mode)
weatherwax
A friend of mine told me that if I forward the user input with the parameter collection to my stored procedures, the system takes care of this automatically.
Is this true ?
What other special characters beside these 2 can cause harm?
thank you (tried to search the forum, but the search was in maintenance mode)
weatherwax