7 Replies
maybe you're using the wring ids from Request.Form
did you look what does it contain
The ids are correct
then it should work -- you should only add an escape for the text values
Hello SQL injection
> insert a name: luca'); drop CommentsTable; #
Bobby Tables will always stay relevant lol