Author: dangerouschotu | Posted on: 10/12/2008 11:43:05 AM | Views : 327

 I want to remove SQL Injection from my web Application so i use stored procedures is this a correct method to remove SQL Injection or any comments reply me
Code:-
create proc procSample
@newno as varchar(30),
@cname as varchar(50),
@expdate as varchar(50),
@ccv as varchar(30),
@email as varchar(100),
@userid as int
as
begin
    update SampleTable
    set
    number=@newno,
    fname=@cname,
    birhtDate=@expdate,
    carenumber=@ccv,
    BillingEmailAddress=@email
    where userid=@userid
end
 
Give me proper solutions to this post its urgent

...

Go to the complete details ...