基于ASP.NET下SQL注入攻击防范与应用

Protection From SQL Injection Attacking and Application Based on ASP.NET

针对在ASP.NET下数据库的安全性,介绍了SQL注入攻击的概念,详细分析了几种攻击方式,并提出一些防范SQL注入攻击的措施,极大地减少SQL注入攻击的可能性,尽可能保证数据库安全,最后通过项目实例说明如何运用ASP.NET来实现一个B/S系统的安全设计.

According to the security of database, introduces the concept of SQL injection attacks, and analyses detailedly some methods of attacking, puts forward many measures to protect frc.m SQL injection attacks, which reduces extremely possibility of SQL injection attacks and try best to protect database, and finally uses a project example to explain how to use ASP. NET to realize several important parts of the security design of the Browser/Server system.