Solved

How to detect for Sql Injection, or any security issue in the asp.net MVC, Lync to Sql, c#  code?

Posted on 2013-10-29
3
500 Views
Last Modified: 2013-11-14
Hi,

I need to code review. Website is implemented in Asp.net mVC, c#, Lync to sql. Is there a tool that will run the c# code or run the website to find any sql injection, security issues.

thanks
0
Comment
Question by:Saroj13
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 75

Expert Comment

by:käµfm³d 👽
ID: 39609166
Are you using any string-concatenated queries? Are you validating **all** user input, even querystrings and POST values? If you answered no to either, then you are vulnerable to SQL Injection.

There is an article here that discusses a couple of different options (none of which I have used myself):  http://www.arneswinnen.net/2013/09/automated-sql-injection-detection/
0
 

Author Comment

by:Saroj13
ID: 39609175
validating using asp.net validators, javascript, custom validation for every input and post values.

is there any tool? Is there any way to secure web.config?
0
 
LVL 75

Accepted Solution

by:
käµfm³d   👽 earned 500 total points
ID: 39609476
web.config is not served by IIS at all, for obvious security reasons. If someone has gotten your web.config, then you've got bigger problems.

Wait for someone else to comment on testing tools. I haven't used any, so all I could offer you is what could be found in a search.
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It was really hard time for me to get the understanding of Delegates in C#. I went through many websites and articles but I found them very clumsy. After going through those sites, I noted down the points in a easy way so here I am sharing that unde…
Real-time is more about the business, not the technology. In day-to-day life, to make real-time decisions like buying or investing, business needs the latest information(e.g. Gold Rate/Stock Rate). Unlike traditional days, you need not wait for a fe…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…
Suggested Courses

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question