I want to remove SQL Injection from my web Application so i use stored procedures is this a correct method to remove SQL Injection or any comments reply me
Code:-
create proc procSample
@newno as varchar(30),
@cname as varchar(50),
@expdate as varchar(50),
@ccv as varchar(30),
@email as varchar(100),
@userid as int
as
begin
update SampleTable
set
number=@newno,
fname=@cname,
birhtDate=@expdate,
carenumber=@ccv,
BillingEmailAddress=@email
where userid=@userid
end
Give me proper solutions to this post its urgent
...
Go to the complete details ...