[devtalk] ASP help

David Precious dave at preshweb.co.uk
Mon Oct 26 13:25:25 GMT 2009


Portman wrote:
> Hi Dave,
> 
> Thanks. Here it is: http://pastebin.com/m1cc7e98. (Cool site - had no 
> idea it existed...)

Righto - I don't do ASP, but hopefully someone else on the list who does 
might take a look and give you better feedback.

I suspect you can remove a lot of it, though, especially all the regex 
stuff you're trying to avoid SQL injection with; dump all of that, and 
use bind params for your SQL queries instead, and you don't need to worry.


More information about the devtalk mailing list