Tags
.NET ADO.NET AggregateException Anti-pattern asp.net ASP.NET MVC C# C# 3 Code Quality ConcurrentDictionary Conference CTP/Beta Database data design DDD DDD Scotland Debugging design patterns error handling fun Google Analytics hiring IIS Installation javascript learning LINQ object oriented design parallelisation parallelization PHP refactoring security software development practices Spatial SQL SQL Injection Attack SQL Server SQL Server 2008 unit testing virtual earth visual studio Visual Studio 2008 Windows 7 Windows VistaArchives
- April 2012
- March 2012
- February 2012
- January 2012
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- March 2007
- February 2007
- December 2006
- July 2006
- April 2005
Monthly Archives: June 2007
SQL Injection Attacks
Every day I see messages on various forums asking for help with SQL. Nothing wrong with that. People want to understand how something works, or have a partial understanding but something is keeping them from completing their task. However, I frequently … Continue reading
UPDATE: Sql Injection Attacks
As a follow up to my post on preventing SQL Injection Attacks a couple of months ago I just found this little nugget, I Made a Difference[^], and it shows what can be achieved if you don’t secure against SQL Injection attacks – and … Continue reading
Please please please learn about SQL Injection Attacks
Here are two more great blog entries about preventing SQL Injection Attacks First, Bertrand Le Roy gives some excellent advice about how to spot potential sites for injection attacks and how to get yourself out of that mess: Please, please, please, … Continue reading
Protecting Tables from SQL Injection Attack
A recent question in a forum that I view asked about how to ensure that even if one layer of security was compromised that the table would only ever return one row at a time so that an attacker would have … Continue reading
Friendly Error Messages (or not)
Microsoft are normally quite good at producing friendly error messages when things don’t work out. However today I rebooted my machine after installing security updates, I fired up Visual Studio and then attempted to open the solution I was working … Continue reading
Tenets of Transparency
Eric Sink, Software Craftsman (and I really love that title) for SourceGear has written an article for MSDN about how ISVs can increase transparency and improve trust in their customers. I especially like his comments on product licence enforcement as … Continue reading
Lean Software Development: An Agile Toolkit
Lean Software Development: An Agile Toolkit by Mary Poppendieck and Tom Poppendieck with Forewords by Jim Highsmith and Ken Schwaber A review of sorts The book defines a number of tools to assist you in implementing an agile approach to … Continue reading
What I’ve been up to
I’ve not posted anything for a while so I thought I’d show of some of my better photos that I have uploaded to Flickr (just to show you what I’ve been up to). These are my ten favourite photos that … Continue reading
Posted in Uncategorized
Leave a comment
Things I keep forgetting about FileInfo
This is going to sound like a real newbie post. But I keep forgetting this particular bit of information and I keep having to write little throw away applications to find out the answer. FileInfo has a number of properties … Continue reading
Normalising the data model
Sometimes I see on forums someone who is trying to get some SQL statement to wield data in a particular way but the data model is just thwarting their attempts, or if they do get something to work the SQL … Continue reading
