We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent bacd9f4 commit 2192844Copy full SHA for 2192844
How to Issue an Insert to Put Data Into a Database/Program.vb
@@ -13,6 +13,10 @@ Module Program
13
Dim connectionString As String = $"Data Source={DatabaseFileName};Version=3;"
14
15
' Set up parameterized SQL query
16
+ ' -----------------------------------------------------------------------------
17
+ ' Security Note: Never concatenate (or join) a string into a SQL statement.
18
+ ' Always use parameterized queries to prevent SQL Injection attacks.
19
20
Dim query As String = "INSERT INTO Users (Name, Country) VALUES (@Name, @Country)"
21
22
Using conn As New SQLiteConnection(connectionString)
0 commit comments