ASP.NET - Preventing SQL Injection Attacks

home
security
view story

1 Kicks

ASP.NET - Preventing SQL Injection Attacks(dotnet.dzone.com)

submitted by volume4(910) 3 years, 11 months ago

SQL injection can occur, as demonstrated above, when an application uses input to construct dynamic SQL statements or when it uses stored procedures to connect to the database. Conventional security measures, such as the use of SSL and IPSec, do not protect your application from SQL injection attacks. Successful SQL injection attacks enable malicious users to execute commands in an application's database. Common vulnerabilities that make your data access code susceptible to SQL injection attacks include

1 comment |category: Security |Views: 19
Tweet

tags: Security another

Everyones tags:

Your Tags:

Please login or signup.

Add a live kick counter to your blog >> liveImage

You can even customize the image by choosing your own colors, and then clicking the button below to update the preview and the html code:

"Kick It" text
"Kick It" background
kick count text
kick count background
border

Simply copy and paste this HTML into your blog post.

Users who kicked this story:

volume4(910)

Comments:

posted by yesthatmcgurk(4063) 3 years, 11 months ago 0

Blogs that don't take anon comments (or require you to register and log on) suck. Please, don't let your blog suck.

I have two suggestions to utterly remove any chance of sql injection attacks for about 99% of all websites that use sql: Use an ORM. Subsonic and LINQ are my favs.

Most Active Users

What's this?