Some operators have temporal properties depending on their placement. E.g.

double x;

x = 2;

Console.Write(++x);

x = 2;

Console.Write(x++);

Console.Write(x);

Returns

323

Bool, char, int, byte, double

CUSTOMER Union Select 'EAST', CUSTOMER From CUST_DTLS Where REGION = 'E' Order By CUSTOMER

The above is

a) Not an error

b) Error - the string in single quotes 'NORTH' and 'SOUTH'

c) Error - the string should be in double quotes

d) Error - ORDER BY clause

htmlspecialchars only takes care of <, >, single quote ', double quote " and ampersand. htmlentities translates all occurrences of character sequences that have different meaning in HTML.

Since the data inside the single-quoted string is not parsed for variable substitution, it's always a better idea speed-wise to initialize a string with single quotes, unless you specifically need variable substitution.

Since the data inside the single-quoted string is not parsed for variable substitution, it's always a better idea speed-wise to initialize a string with single quotes, unless you specifically need variable substitution.