Hello,
I'm trying to create a little simple login that is vulnerable to SQL injections and then afterwards I want to secure it so I have a little demo that I can share in my class.
So far I have created an empty ASP.NET MVC 5 application and have a HomeController.cs, Index.cshtml and created a small database with one table in SQL Server. I found some help and example code on Stackoverflow but I am not sure how to move forward. I feel
a bit stuck.
Here is my controller.
public class HomeController : Controller
{
public ActionResult Index()
{
return View();
}
public ActionResult Login()
{
var username = Request.QueryString["username"];
var password = Request.QueryString["password"];
string connectionString = "Data Source=(localdb)\v11.0;Initial Catalog=SqlInjectionDb;Integrated Securit ...
Go to the complete details ...