With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and...With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and used in the wild. This paper analyzes the principle of SQL injection attacks on Web sites, presents methods available to prevent IIS ＋ ASP ＋ MSSQL web applications from these kinds of attacks, including secure coding within the web application, proper database configuration, deployment of IIS. The result is verified by WVS report.展开更多
文摘With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and used in the wild. This paper analyzes the principle of SQL injection attacks on Web sites, presents methods available to prevent IIS ＋ ASP ＋ MSSQL web applications from these kinds of attacks, including secure coding within the web application, proper database configuration, deployment of IIS. The result is verified by WVS report.
文摘文章设计了一种基于Web的在线直销管理系统,以解决传统直销管理存在的各种问题,促进网络直销管理系统的发展和普及。系统采用B/S模式、.Net MVC框架开发,选择C#,Java Script和Html语言作为开发语言,后台数据库选用MSSQL2008,主要开发工具是Visual Studio 2012。在线直销系统包括系统管理、会员管理、会员上下级管理、提现机制、控制利润分配、管理员审核等模块,可以实现在线注册、在线提现、在线审核等功能,从而极大提高了会员间获取以及分配利润的效率,节约了运营成本。
