Re: Preventing ALL text SQL Injection by removing single-quotes ?

From: John Bell (jbellnewsposts_at_hotmail.com)
Date: 07/05/05 

Date: 4 Jul 2005 23:36:39 -0700

Hi

You are assuming a certain business rule is applied which is probably
quite rare. You may be able to provide dropdowns if your values are so
specific and remove the need to type in anything!!

The parameterised query option is generic and can cater for all
sutuations, it should also be fast.

John