Comments on: Microsoft tools address SQL injection attacks

Advisory helps Web sites that use Microsoft ASP and ASP.NET technologies against recent Web-based attacks.

[jimkii]

If developers would use bind variables (prepared statements in Java) they would not have to worry about SQL Injection attacks. MS and other vendors strongly recommend using bind variables in code. it leads to more secure and higher performing code.

[jnarvey]

Oops! Microsoft's list wasn't quite complete. Another tool that will protect against SQL injection (and other threats like XSS hacks) is Devfense (more info at http://www.boonbox.net/devfense.htm), a boxed service tool that integrates seamlessly with existing IT environments. Cheers.

[has_zah]

Hi,
I read the article, It is really helpful.
Few days back my website PDA Accessories got hacked by a hacker from canada. After fixing it my developer implement the instructions written here. And now my site is more secure.

Thanks for the tools....
Hassan Z Ch.