This is not really a problem - yet. It is merely me trying to understand how to secure my code from sql injection. I'm using classic asp as it's all I know.
As far as I understand using stored procedures within my mysql database and then calling these procedures would be the way forward. I'd like to get this working.
I was directed towards this web-page in an earlier question:
https://www.mikesdotnetting.com/article/5/saved-parameter-queries-with-ms-access-and-asp
However this concerns an MS access database, and I can't get it to work in my mysql database (for obvious reasons I guess).
Let's assume that I have table MyTable with the followong fields: Id (mediumint), GUID (varchar), Name (Text), DateInserted (Datetime), Comments (Text) (DateTime), Status (mediumint)
I need to read from, update, insert and delete in this table.
I would need to create stored procedures for this, right? I can't seem to find a way to do that using phpMydAdmin (which is what I got and will use, regardless). How would I create these procedures?
Remember that this has to work with classic asp.
Best regards
Michael
Our community of experts have been thoroughly vetted for their expertise and industry experience.