Wednesday, February 22, 2012

How to Prevent SQL Injection in ASP.NET

http://web.securityinnovation.com/appsec-weekly/blog/bid/79150/How-to-Prevent-SQL-Injection-in-ASP-NET


Step 1. Constrain Input
You should validate all input to your ASP.NET applications for type, length, format, and range. By constraining the input used in your data access queries, you can protect your application from SQL injection.

Step 2. Use Parameters with Stored Procedures
Using stored procedures does not necessarily prevent SQL injection. The important thing to do is use parameters with stored procedures. If you do not use parameters, your stored procedures can be susceptible to SQL injection if they use unfiltered input as described in the "Overview" section of this document.

Step 3. Use Parameters with Dynamic SQL

ASP.NET Caching, Micro-Caching, and Performance

http://www.eggheadcafe.com/tutorials/asp-net/2518777b-c584-4305-941a-1a2d1a4b857d/aspnet-caching-microcaching-and-performance.aspx

Caching is your friend. If you have to present data that comes out of a database, and you run a website that gets a lot of traffic and requests, especially if the data is "read only"  (which it almost always is), you can get - in most cases - vastly improved throughput by caching this data for as little as 1/2 of one second. 

Friday, February 17, 2012

ASP.NET MVC 4 Beta Released!

http://weblogs.asp.net/jgalloway/archive/2012/02/16/asp-net-4-beta-released.aspx

ASP.NET Web API

The big new feature since the Developer Preview is the introduction of ASP.NET Web API.
ASP.NET Web API is built for all the other, non-human interactions your site or service needs to support

How to Retrieve Resource Values Programmatically in ASP.NET


        Button1.Text = GetLocalResourceObject("Button1.Text").ToString();
        Image1.ImageUrl =     (String)GetGlobalResourceObject(
            "WebResourcesGlobal", "LogoUrl");
Reference: http://msdn.microsoft.com/en-US/library/ms227982(v=vs.80).aspx