NetProtek : Prevent SQL Injection | Database secure

Products

NET.Content CMS

NET.Mailer

Cellular Applications

IT HelpDesk App.

Components

NET.Banner

SQL injection : Example

Visual Basic

Dim SQLinj As New Netprotek_SQLinj.SQLinj

Dim number As Integer

number = sqlinj.VLD_INT_ZERO("123456")

' output
123456

number = sqlinj.VLD_INT_ZERO("text_here")

' output
0

number = sqlinj.VLD_INT_ZERO("")

' output
0

Dim Text As String

'First Low level (Common use)

number = sqlinj.WrapSQLQuotes("text_here")

'For HTML Replace Quotes

number = sqlinj.WrapHTMLQuotes("text_here")

'First High level

number = sqlinj.killChars("text_here")

'First Extra High level

number = sqlinj.killCharsExtra("text_here")

JavaScript

var Mobj = new ActiveXObject("Netprotek_SQLinj.SQLinj");

var number = sqlinj.VLD_INT_ZERO("123456")

// output
123456

var number = sqlinj.VLD_INT_ZERO("text_here")

// output
0

var number = sqlinj.VLD_INT_ZERO("")

// output
0

//First Low level (Common use)

var number = sqlinj.WrapSQLQuotes("text_here")

//For HTML Replace Quotes

var number = sqlinj.WrapHTMLQuotes("text_here")

//First High level

var number = sqlinj.killChars("text_here")

//First Extra High level

var number = sqlinj.killCharsExtra("text_here")

Active Server Pages

set SQLinj = server.createobject("Netprotek_SQLinj.SQLinj")

Dim number As Integer

number = sqlinj.VLD_INT_ZERO("123456")

' output
123456

number = sqlinj.VLD_INT_ZERO("text_here")

' output
0

number = sqlinj.VLD_INT_ZERO("")

' output
0

Dim Text As String

'Low level (Common use)

Text = sqlinj.WrapSQLQuotes("text_here")

'For HTML Replace Quotes

Text = sqlinj.WrapHTMLQuotes("text_here")

'High level

Text = sqlinj.killChars("text_here")

'Extra High level

Text = sqlinj.killCharsExtra("text_here")

Set SQLinj = nothing

ASP.NET

@Import Namespace="Netprotek_SQLinj_NET"

Dim oSqlInj As New Netprotek_SQLinj_NET.SQLinj()

Dim number As Integer = oSqlInj.VLD_INT_ZERO("123456")

' output
123456

Dim number As Integer = oSqlInj.VLD_INT_ZERO("text_here")

' output
0

Dim number As Integer = oSqlInj.VLD_INT_ZERO("")

' output
0

'Low level (Common use)

Dim Text As String = oSqlInj.WrapSQLQuotes("text_here")

'For HTML Replace Quotes

Dim Text As String = oSqlInj.WrapHTMLQuotes("text_here")

'High level

Dim Text As String = oSqlInj.killChars("text_here")

'Extra High level

Dim Text As String = oSqlInj.killCharsExtra("text_here")