Browse by Tags

Home › ASP.NET Weblogs

All Tags » Security » Sql (RSS)

SQL Injection Security Experiences

Last evening I tried out two of the tools that Joe Stagner wrote about in his blog post Tools to block and eradicate SQL injection . Since I manage a classic ASP web application that was completely lacking in security and potentially vulnerable to these attacks, I thought I'd share my experiences. The...

Posted to Robert Robbins (Weblog) by rrobbins on 06-25-2008, 12:00 AM
Filed under: SQL, ASP, Security, SQL Injection, Scawlr
Massive SQL Injection Attack - Did You Hit The Snooze Alarm On The Wake Up Call?

I've seen very little blogger chatter about the massive SQL injection attack that is making the news even though it is us web developers who are being blamed for it. Even Jeff Atwood has neglected to blog about it and he loves to rant about shoddy coding practices in the industry. I suspect the silence...

Posted to Robert Robbins (Weblog) by rrobbins on 04-30-2008, 12:00 AM
Filed under: SQL, ASP, Security
Back on new Blog Software CS

this is more or less a test posting the UI have changed completley and i want to figure out how, what and why took some while and email support to figure out how this works. Done some ugly trick to get the tags in my [Select Tag] list posted all of the tags, which i copied from the start page .NET,.net...

Posted to Hannes Preishuber (Weblog) by preishuber on 05-22-2006, 12:00 AM
Filed under: ASP.NET, C#, .NET, Miscellaneous, Tips, XML, Personal, Agile, Ajax, Sql, Security, Technology, .NET General, Community, Databases, SharePoint, Tools, .NET Rocks!, Web, .net development, VB.NET, Windows, News, Architecture
Please, please, please, learn about injection attacks!

I answer a lot of posts on the forums of the ASP.NET site. And more often than I would like to, I answer a different question than the one the poster asked, because I happened to easily spot a potential injection attack in the posted code. Now, what is an injection attack? If you don't know and you're...

Posted to Tales from the Evil Empire (Weblog) by Bertrand Le Roy on 08-18-2004, 12:00 AM
Filed under: ASP.NET, HTML, PHP, SQL, security, injection