quote:

Orijinalden alıntı: alpmirza

https://msdn.microsoft.com/en-us/library/system.data.sqlclient.sqlcommand.parameters(v=vs.110).aspx

 
 private static void UpdateDemographics(Int32 customerID, 
     string demoXml, string connectionString) 
 { 
     // Update the demographics for a store, which is stored  
     // in an xml column.  
     string commandText = "UPDATE Sales.Store SET Demographics = @demographics " 
         + "WHERE CustomerID = @ID;"; 
  
     using (SqlConnection connection = new SqlConnection(connectionString)) 
     { 
         SqlCommand command = new SqlCommand(commandText, connection); 
         command.Parameters.Add("@ID", SqlDbType.Int); 
         command.Parameters["@ID"].Value = customerID; 
  
         // Use AddWithValue to assign Demographics. 
         // SQL Server will implicitly convert strings into XML. 
         command.Parameters.AddWithValue("@demographics", demoXml); 
  
         try 
         { 
             connection.Open(); 
             Int32 rowsAffected = command.ExecuteNonQuery(); 
             Console.WriteLine("RowsAffected: {0}", rowsAffected); 
         } 
         catch (Exception ex) 
         { 
             Console.WriteLine(ex.Message); 
         } 
     } 
 } 
 

quote:

Orijinalden alıntı: el-harezmi_0

Hocam alıntı yaparsanız daha iyi olur. Yoksa haberdar olamıyoruz.

https://soulsecurity.wordpress.com/2012/12/05/sql-injection-temel-saldiri-ve-savunma/amp/



https://www.olympos.net/howto-nasil/sql-injection/adim-adim-sql-injection-93419.html



http://www.burakavci.com.tr/2014/01/sql-injection-login-bypass.html?m=1



http://www.zskblog.com/detay.aspx?id=22

https://www.cyber-warrior.org/Dokuman/Default.Asp?Data_id=704



http://www.ismailsaygili.com.tr/2014/05/php-scriptlerde-sql-injection-tespiti-ve-exploit-etme.html?m=1



Muhtemelen bu siteleri sizde incelemişsinizdir ancak yinede başka arkadaşlara yardımcı olabilir.