protect password from sqlinjection ?

[rajivkadam420]

how to protect my database table field from sql injection so that it cannot be hacked please suggest i m using classic asp to build websites

[jhardman]

1- it is a good idea to use a stored procedure to which you can pass parameters, rather than build a text query in your script

2- depending on which database you use it might not be possible to do a SQL injection without a semi-colon (;), so you might want to consider disallowing semi-colons

Jared