Avoiding SQL Injection in Entity Framework Core (While using inline queries)

Publicado el: 11 octubre 2020
en el canal de: DotNet Core Central

7,833

I did a couple of videos in past regarding Entity Framework Core. But during those videos, I did not cover the aspects of SQL Injections and how it comes to play with Entity Framework Core. In this video, I will be walking through how to valid potential SQL Injection pitfalls.

What is SQL Injection? SQL injection is a way to inject vulnerable SQL code through a loophole exposed by the code to make unwanted changes to the database. For example, if we use inline queries and expect a name to be passed as a parameter, but we use string interpolation, there is a possibility of a user passing queries as a part of the name to destroy the database.

Entity Framework Core makes it really easy to avoid SQL Injection, using a couple of ways. And in this video, I will go through both these ways of using Entity Framework Core to avoid SQL injection.

My previous videos for Entity Framework Core are here:
   • Entity Framework Core (CRUD Operation in ....
   • Entity Framework Core (In-Line Query, Stor...
   • Entity Framework Core (Inline Query for In...

Source code for this video session is available in my GitHub repo: https://github.com/choudhurynirjhar/E...

En esta página del sitio puede ver el video en línea Avoiding SQL Injection in Entity Framework Core (While using inline queries) de Duración hora minuto segunda en buena calidad , que subió el usuario DotNet Core Central 11 octubre 2020, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 7,833 veces y le gustó 84 a los espectadores. Disfruta viendo!

123