techtarget

Executing SQL statements using prepared statements and statement pooling

A prepared statement is a SQL statement that has been compiled, or prepared, into an access or query plan for efficiency. A prepared statement is available for reuse by the application without the ...
techtarget

How to prevent SQL injection with prepared statements

Structured Query Language, or SQL, is a programming language used with databases. SQL injection attacks -- when malicious SQL statements are inserted into an input query to gain access to a database - ...
Ars Technica

sql IF statements - using query results as conditionals

I'm trying to get better aquainted with conditional sql statements, using variables, loops, and all that other junk. (This is MSSQL 2000 by the way) My test is that I want to try to cycle thru all of ...