Hello. I am using visual studio 2010 pro asp.net website. I have a database that is open connection when the login button is pressed and then after check it closes. I dont think that protect my database from sql injection. They can use something like  or '1'='1 that is not protected. I am still learning programming. I been developing windows websites server and games... And i learned all the begginer stuff and going to advanced programming. And i made my own website that i want to use it to contact with people that does have Skype. BUT a lot of my friends use sql injection programs the most common used by them is kali linux. I am expert at detecting viruses but not sql protection. I want to protect my website that it cant be hacked by simple sql injection programs. I protected that the google trick like inurl:/adminlogin.asp wont work by making website names that no one ever used... Is there a way to protect my website asp.net database with a program or something? ...

Go to the complete details ...