ASP. net SQL injection solution

Document directory

• URL scan 3.1
• IIS 6 SQL Injection sanitation ISAPI wildcard

Any kind of database web programs (including desktop programs, of course) may be at risk of SQL injection. The most basic way to prevent SQL injection is to block this possibility at the code level. I will not talk much about this on the Internet. But if you get a finished product, what should you do at this time? I have introduced several effective SQL Injection prevention solutions for ASP and ASP. NET, and they are free of charge.

URL scan 3.1

URLScan 3.1 is a security tool officially developed by Microsoft. It checks all HTTP requests processed by IIS. URLScan can block an HTTP request that has security issues before it reaches the application. URLScan 3.1 is an upgraded version of URLScan 2.5. It supports IIS 2008, IIS 5.1, and IIS 6.0 on Windows Vista and Windows Server 7.0 systems.

Http://www.iis.net/expand/UrlScan there are a lot of very useful IIS extensions here, you can look.

IIS 6 SQL Injection sanitation ISAPI wildcard

This isapi dll also avoids SQL Injection by checking HTTP requests. Only compatible with IIS 2003 on Windows 6.0. IIS 5 on Windows XP is not supported.

This is an open source project: http://www.codeplex.com/IIS6SQLInjection

 

 

From: http://www.cnblogs.com/DotNetNuke/archive/2009/12/30/1635758.html