RE: Unable to insert a record into MS Access
- From: v-kevy@xxxxxxxxxxxxxxxxxxxx (Kevin Yu [MSFT])
- Date: Mon, 16 Jan 2006 03:41:32 GMT
Hi,
Thanks for your code. As far as I can see, there isn't anything wrong in
the code. However, it is not recommended to concatenate SQL statements like
this. Because others can use injection attack to hack your database. Also
there will be some other issues with this. I strong suggest you use
parameters. Please check the following for more information.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/
frlrfsystemdataoledboledbparameterclasstopic.asp
Kevin Yu
=======
"This posting is provided "AS IS" with no warranties, and confers no
rights."
.
- Prev by Date: Calling GC.Collect after OleDBConnection.Close
- Next by Date: Re: Calling GC.Collect after OleDBConnection.Close
- Previous by thread: Calling GC.Collect after OleDBConnection.Close
- Next by thread: RE: Unable to insert a record into MS Access
- Index(es):
Relevant Pages
|
Loading
