Share via

SQL Injection: Trends & Guidance

  • Article

I've been working with the SWI team to write a comprehensive overview of the SQL Storm attacks with guidance for IT administrators, developers, and end users.  That article is posted at sql-injection-attack.aspx.

For developers, specifically, Bala Neerumalla has written an excellent overview of SQL injection and classic ASP code for MSDN at cc676512.aspx.  This is well worth a read for any developer who has legacy ASP code running -- it covers a variety of scenarios and how to resolve them.