Click here to Skip to main content
15,885,957 members
Home / Discussions / Android
   

Android

 
GeneralRe: Method not returning expected value Pin
Davidw196924-Feb-17 16:41
Davidw196924-Feb-17 16:41 
AnswerRe: Method not returning expected value Pin
Jochen Arndt23-Feb-17 3:45
professionalJochen Arndt23-Feb-17 3:45 
GeneralRe: Method not returning expected value Pin
Richard MacCutchan23-Feb-17 5:45
mveRichard MacCutchan23-Feb-17 5:45 
AnswerRe: Method not returning expected value Pin
Davidw196924-Feb-17 16:52
Davidw196924-Feb-17 16:52 
AnswerRe: Method not returning expected value Pin
Richard MacCutchan23-Feb-17 3:58
mveRichard MacCutchan23-Feb-17 3:58 
GeneralRe: Method not returning expected value Pin
Davidw196924-Feb-17 16:53
Davidw196924-Feb-17 16:53 
QuestionAndroid and C# Web Services Pin
Member 1155786814-Feb-17 22:41
Member 1155786814-Feb-17 22:41 
SuggestionRe: Android and C# Web Services Pin
Richard Deeming15-Feb-17 2:39
mveRichard Deeming15-Feb-17 2:39 
Your code is vulnerable to SQL Injection[^]. NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]

C#
try
{
    using (var con = new SqlConnection(ConfigurationManager.ConnectionStrings["dbconnection"].ConnectionString))
    using (var cmd = new SqlCommand("INSERT INTO GPSTrackerCar (data, car, lat, lng) VALUES (GetDate(), @car, @lat, @lng)", con))
    {
        cmd.Parameters.AddWithValue("@car", car);
        cmd.Parameters.AddWithValue("@lat", lat);
        cmd.Parameters.AddWithValue("@lng", lng);
        
        con.Open();
        cmd.ExecuteNonQuery();
        return "OK";
    }
}
catch(SqlException ex)
{
    return ex.Message;
}


Also, if your lat and lng parameters represent latitude and longitude, you should use a more specific data type - for example, double.

And a method name starting with Get suggests that it's going to retrieve data, but your method is inserting data. I'd suggest changing the name to something like StoreCoordinates.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer


QuestionAndroid: High Pass filter Pin
Himanshu Bhutani13-Feb-17 1:36
Himanshu Bhutani13-Feb-17 1:36 
QuestionRe: Android: High Pass filter Pin
David Crow13-Feb-17 2:41
David Crow13-Feb-17 2:41 
AnswerRe: Android: High Pass filter Pin
Nick_314159265415-Apr-17 3:55
Nick_314159265415-Apr-17 3:55 
QuestionAndroid Day of Week Calculator Pin
Pavlex49-Feb-17 9:50
Pavlex49-Feb-17 9:50 
AnswerRe: Android Day of Week Calculator Pin
David Crow9-Feb-17 10:02
David Crow9-Feb-17 10:02 
GeneralRe: Android Day of Week Calculator Pin
Pavlex49-Feb-17 10:09
Pavlex49-Feb-17 10:09 
GeneralRe: Android Day of Week Calculator Pin
David Crow9-Feb-17 10:12
David Crow9-Feb-17 10:12 
GeneralRe: Android Day of Week Calculator Pin
Pavlex49-Feb-17 10:15
Pavlex49-Feb-17 10:15 
SuggestionRe: Android Day of Week Calculator Pin
David Crow9-Feb-17 10:23
David Crow9-Feb-17 10:23 
GeneralRe: Android Day of Week Calculator Pin
Pavlex49-Feb-17 10:32
Pavlex49-Feb-17 10:32 
GeneralRe: Android Day of Week Calculator Pin
David Crow9-Feb-17 10:36
David Crow9-Feb-17 10:36 
GeneralRe: Android Day of Week Calculator Pin
Pavlex49-Feb-17 10:38
Pavlex49-Feb-17 10:38 
GeneralRe: Android Day of Week Calculator Pin
Richard MacCutchan9-Feb-17 21:07
mveRichard MacCutchan9-Feb-17 21:07 
GeneralRe: Android Day of Week Calculator Pin
Pavlex49-Feb-17 21:39
Pavlex49-Feb-17 21:39 
GeneralRe: Android Day of Week Calculator Pin
Richard MacCutchan9-Feb-17 22:20
mveRichard MacCutchan9-Feb-17 22:20 
GeneralRe: Android Day of Week Calculator Pin
David Crow10-Feb-17 2:08
David Crow10-Feb-17 2:08 
GeneralRe: Android Day of Week Calculator Pin
Richard MacCutchan10-Feb-17 2:46
mveRichard MacCutchan10-Feb-17 2:46 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.