I'm testing my site against SQL injection attacks and I would like to trace SqlDataSource messages sent to SQL server. How can I do that or at least get as close as I can.
+1
A:
SqlDataSource uses parametrized queries internally and normally that's enough for avoiding SQL Injection.
Here you an MSDN article to check
Claudio Redi
2010-06-15 14:27:37
Thanks. I suspected it would.
Sergej Andrejev
2010-06-15 14:51:15