I am using asp.net mvc 3 with WCF with EF 4.1 With Sql Azure. I am building the search engine for my application. and using the dynamic Linq to build queries. I want to avoid the sql injetion in this scenario. what is the best practice for the same ? what are the precaoution i should take in this scenario ?
Share
As long as your are building your queries through LINQ, then you are not vulnerable to SQL injection. While this doesn’t mean that your code is invulnerable to ALL sorts of attacks (brute forcing passwords, etc.), you won’t be vulnerable to SQL injection.