Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How to detect for Sql Injection, or any security issue in the asp.net MVC, Lync to Sql, c#  code?

Posted on 2013-10-29
3
Medium Priority
?
522 Views
Last Modified: 2013-11-14
Hi,

I need to code review. Website is implemented in Asp.net mVC, c#, Lync to sql. Is there a tool that will run the c# code or run the website to find any sql injection, security issues.

thanks
0
Comment
Question by:Saroj13
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 75

Expert Comment

by:käµfm³d 👽
ID: 39609166
Are you using any string-concatenated queries? Are you validating **all** user input, even querystrings and POST values? If you answered no to either, then you are vulnerable to SQL Injection.

There is an article here that discusses a couple of different options (none of which I have used myself):  http://www.arneswinnen.net/2013/09/automated-sql-injection-detection/
0
 

Author Comment

by:Saroj13
ID: 39609175
validating using asp.net validators, javascript, custom validation for every input and post values.

is there any tool? Is there any way to secure web.config?
0
 
LVL 75

Accepted Solution

by:
käµfm³d   👽 earned 1500 total points
ID: 39609476
web.config is not served by IIS at all, for obvious security reasons. If someone has gotten your web.config, then you've got bigger problems.

Wait for someone else to comment on testing tools. I haven't used any, so all I could offer you is what could be found in a search.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Real-time is more about the business, not the technology. In day-to-day life, to make real-time decisions like buying or investing, business needs the latest information(e.g. Gold Rate/Stock Rate). Unlike traditional days, you need not wait for a fe…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…
Suggested Courses

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question