Link to home
Start Free TrialLog in
Avatar of pointeman
pointemanFlag for United States of America

asked on

.NET Login Control SQL Injection Proof?

I like the simplicity of the .NET Login control, System.Web.Security.SqlMembershipProvider and aspnetdb.

Q. Do I need additional codebehind (regex, etc...) to protect against SQL Injection attempts?
ASKER CERTIFIED SOLUTION
Avatar of Dirk Haest
Dirk Haest
Flag of Belgium image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of pointeman

ASKER

Good read. Seems the most used chars are ; and -- so I think a simple textbox text evaluation like so would do well.

userName.Text  = "; Delete Table Admin --";

if ( Regex.IsMatch(userName.Text, "; | --))