Return to HomePage

---

SQL Injection Lab Modules

The SQL injection lab modules show you how to protect from SQL injection.

Contents

* Objectives
* Video
* Lab
* Recommended Guidance
* Feedback

Objectives

* Exploit a SQL injection vulnerability.
* Defend against SQL injection by filtering and sandboxing input with a parameterized query.

Video

The video is a small wmv file download:
* Video Demonstration: SQL Injection

Lab

The lab is small zip that you need to extract to see the example code:
* Lab Project Files SQLInjectionLab.zip

Recommended Guidance

* How To: Protect From SQL Injection in ASP.NET
* How To: Protect From Injection Attacks in ASP.NET
* How To: Use Regular Expressions to Constrain Input in ASP.NET
* Security Guidelines: ADO.NET 2.0 (See "Input and Data Validation" section)
* Security Guidelines: ADO.NET 2.0 (See "SQL Injection" section)
* Design Guidelines for Secure Web Applications (See "Input Validation" section)
* Architecture and Design Review for Security (See "Input Validation" section)
* Security Guidelines: ASP.NET 2.0 (See "Input and Data Validation" section)

Feedback

* Send mail to labmods at microsoft.com

---

Return to HomePage