Screw Classical SQL, switch to LINQ to SQL

For SpaceLock's Web Interface, I've started using LINQ to SQL. LINQ stands for LanguageINtegratedQuery. You no longer put SQL queries into strings and drive them using various objects provided System.Data.sqlConnection. Instead, these queries become a part of your code itself. Yes, we're talking about integration as the name implies. Read more here to see how LINQ minimized the code and improved security.
While the listed code on the blog that uses classical SQL query is still vulnerable to lot of tricks.

0 comments:

Post a Comment