http://msdn.microsoft.com/en-us/magazine/hh848259.aspx
Friday, February 24, 2012
Wednesday, February 22, 2012
How to Prevent SQL Injection in ASP.NET
http://web.securityinnovation.com/appsec-weekly/blog/bid/79150/How-to-Prevent-SQL-Injection-in-ASP-NET
Step 1. Constrain Input
You should validate all input to your ASP.NET applications for type, length, format, and range. By constraining the input used in your data access queries, you can protect your application from SQL injection.
Step 2. Use Parameters with Stored Procedures
Using stored procedures does not necessarily prevent SQL injection. The important thing to do is use parameters with stored procedures. If you do not use parameters, your stored procedures can be susceptible to SQL injection if they use unfiltered input as described in the "Overview" section of this document.
Step 3. Use Parameters with Dynamic SQL
Step 1. Constrain Input
You should validate all input to your ASP.NET applications for type, length, format, and range. By constraining the input used in your data access queries, you can protect your application from SQL injection.
Step 2. Use Parameters with Stored Procedures
Using stored procedures does not necessarily prevent SQL injection. The important thing to do is use parameters with stored procedures. If you do not use parameters, your stored procedures can be susceptible to SQL injection if they use unfiltered input as described in the "Overview" section of this document.
Step 3. Use Parameters with Dynamic SQL
ASP.NET Caching, Micro-Caching, and Performance
http://www.eggheadcafe.com/tutorials/asp-net/2518777b-c584-4305-941a-1a2d1a4b857d/aspnet-caching-microcaching-and-performance.aspx
Caching is your friend. If you have to present data that comes out of a database, and you run a website that gets a lot of traffic and requests, especially if the data is "read only" (which it almost always is), you can get - in most cases - vastly improved throughput by caching this data for as little as 1/2 of one second.
Caching is your friend. If you have to present data that comes out of a database, and you run a website that gets a lot of traffic and requests, especially if the data is "read only" (which it almost always is), you can get - in most cases - vastly improved throughput by caching this data for as little as 1/2 of one second.
Friday, February 17, 2012
ASP.NET MVC 4 Beta Released!
http://weblogs.asp.net/jgalloway/archive/2012/02/16/asp-net-4-beta-released.aspx
ASP.NET Web API
The big new feature since the Developer Preview is the introduction of ASP.NET Web API.
ASP.NET Web API is built for all the other, non-human interactions your site or service needs to support
How to Retrieve Resource Values Programmatically in ASP.NET
Button1.Text = GetLocalResourceObject("Button1.Text").ToString(); Image1.ImageUrl = (String)GetGlobalResourceObject( "WebResourcesGlobal", "LogoUrl");Reference: http://msdn.microsoft.com/en-US/library/ms227982(v=vs.80).aspx
Subscribe to:
Posts (Atom)