Proving SQL Injection

Question

I\'m trying to simply prove here that this simple function isn\'t good enough to prevent every sql injection in the world:

Function CleanForSQL(ByVal input A         


        

Answer 1

I think your problem is that Chr(8) is not executed, you need to find another way to get the leading quote mark in.