ms access - About SQL-injection in C# -


i visited link sql-injection. way use parameters is:

 cmd.commandtext = "update [something_table] set = @something id = 1;";   var pparameter = new oledbparameter("@something", oledbtype.int);                         pparameter.value = something;                         cmd.parameters.add(pparameter);   

but link says .parameters.addwithvalue method simpler:

cmd.parameters.addwithvalue("@something", something); 

what's main different between these? can choose addwithvalue instead without consequences?


Comments

Popular posts from this blog

testing - Detect whether test has failed within fixture -

AbotX : How do you create a parallel crawler that stays on and can be added to at run time from new requests -

android - Create single AAR file from multiple modules using Gradle -