How to Prevent SQL Injection in ASP.NET

http://web.securityinnovation.com/appsec-weekly/blog/bid/79150/How-to-Prevent-SQL-Injection-in-ASP-NET


Step 1. Constrain Input
You should validate all input to your ASP.NET applications for type, length, format, and range. By constraining the input used in your data access queries, you can protect your application from SQL injection.

Step 2. Use Parameters with Stored Procedures
Using stored procedures does not necessarily prevent SQL injection. The important thing to do is use parameters with stored procedures. If you do not use parameters, your stored procedures can be susceptible to SQL injection if they use unfiltered input as described in the "Overview" section of this document.

Step 3. Use Parameters with Dynamic SQL

ASP.NET Caching, Micro-Caching, and Performance

http://www.eggheadcafe.com/tutorials/asp-net/2518777b-c584-4305-941a-1a2d1a4b857d/aspnet-caching-microcaching-and-performance.aspx

Caching is your friend. If you have to present data that comes out of a database, and you run a website that gets a lot of traffic and requests, especially if the data is "read only"  (which it almost always is), you can get - in most cases - vastly improved throughput by caching this data for as little as 1/2 of one second. 

ASP.NET MVC 4 Beta Released!

http://weblogs.asp.net/jgalloway/archive/2012/02/16/asp-net-4-beta-released.aspx

ASP.NET Web API

The big new feature since the Developer Preview is the introduction of ASP.NET Web API.

ASP.NET Web API is built for all the other, non-human interactions your site or service needs to support

How to Retrieve Resource Values Programmatically in ASP.NET

        Button1.Text = GetLocalResourceObject("Button1.Text").ToString();
        Image1.ImageUrl =     (String)GetGlobalResourceObject(
            "WebResourcesGlobal", "LogoUrl");
Reference: http://msdn.microsoft.com/en-US/library/ms227982(v=vs.80).aspx

Parallel processing of concurrent Ajax requests in Asp.Net MVC

http://www.stefanprodan.eu/2012/02/parallel-processing-of-concurrent-ajax-requests-in-asp-net-mvc/

If you want to enable a certain controller to process requests in parallel from a single user, you can use an attribute named SessionState that was introduced in MVC since version 3. It’s not necessary to use a session-less controller in order to achieve parallelism, the Ready-only option of theSessionStateBehavior will let you pass security checks you may have implemented based on Session data.

ParallelController.cs

    [SessionState(System.Web.SessionState.SessionStateBehavior.ReadOnly)]
    [OutputCache(NoStore = true, Duration = 0, VaryByParam = "*")]
    public class ParallelController : Controller
    {
        public JsonResult Get1()
        {
            //read from session
            var x = Session["call"];
            Thread.Sleep(5000);
            return Json(new { obj = "p1" }, JsonRequestBehavior.AllowGet);
        }

        public JsonResult Get2()…
        public JsonResult Get3()…