sql injection in linq

Question

Hi can anyone tell me is sql injection is possible in linq

Lakshmanan Sethu · Answer

Hi yes its avoided in Linq to SQL. please refer the interesting articles http://www.devx.com/dotnet/Article/34653 http://forums.asp.net/t/1884940.aspx?linq+prevent+sql+injection

Bhabani Prasad · Answer

In general sql injection is a technique used by hacker to steal your data or hamper your data by giving query at runtime in your application.so to avoid sqlinjection its better to use stored procedure for which it cant be occured

Princy Gupta · Answer

Hi SQL injection is taken care of in linq queries. LINQ to SQL passes all data to the database via SQL parameters. So although the SQL query is composed dynamically the values are substitued server side through parameters safeguarding against the most common cause of SQL injection attacks. Found an interesting article @http://www.dotnetspark.com/kb/2040-eliminate-sql-injection-attacks-with-linq.aspx