views:

25

answers:

1

I'm testing my site against SQL injection attacks and I would like to trace SqlDataSource messages sent to SQL server. How can I do that or at least get as close as I can.

+1  A: 

SqlDataSource uses parametrized queries internally and normally that's enough for avoiding SQL Injection.

Here you an MSDN article to check

How To: Protect From SQL Injection in ASP.NET

Claudio Redi
Thanks. I suspected it would.
Sergej Andrejev