bhdryrdm

SELECT * FROM SQLInjection_User 
WHERE Username=N'Bahadır' --' AND Password=N'123'

bhdryrdm

DECLARE @Username AS SQL_VARIANT;
DECLARE @Password AS SQL_VARIANT;
SET @Username = NULL;
SET @Password = NULL;

SELECT * FROM SQLInjection_User WHERE Username=@Username AND Password=@Password

bhdryrdm

using DevF_LABS.Presentation.Filter;
using Newtonsoft.Json;
using System.Collections.Generic;
using System.Net;
using System.Web.Configuration;
using System.Web.Mvc;

namespace DevF_LABS.Presentation.Controllers
{
    [ValidateModelFilter]

bhdryrdm

using DevF_LABS.RequestResponse;
using DevF_LABS.RequestResponse.Injection.SQLInjection;
using System;
using System.Data.SqlClient;
using System.Threading.Tasks;
using System.Web.Mvc;

namespace DevF_LABS.Presentation.Controllers
{
    public class InjectionController : BaseController

bhdryrdm

using System.ComponentModel.DataAnnotations;

namespace DevF_LABS.RequestResponse.Injection.SQLInjection
{
    public class SQLI_S1_LoginRequest
    {
        [Required(ErrorMessage = "Kullanıcı Adı zorunlu alandır!")]
        [StringLength(200, ErrorMessage = "Kullanıcı Adı 200 karakterden fazla olamaz!")]
        public string Username { get; set; }

bhdryrdm

using DevF_LABS.Business.BusinessServices;
using DevF_LABS.Helper;
using DevF_LABS.RequestResponse;
using DevF_LABS.RequestResponse.XSS.ReflectedXSS;
using DevF_LABS.RequestResponse.XSS.StoredXSS;
using System;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using System.Web.Security;

bhdryrdm

/* 
* Bu trigger kullanıcı tablosuna 5 kayıttan sonra 5 kayıt arasındaki 3.kullanıcıyı silmektedir.
* Yeni eklenen kullanıcı 5. kayıt olarak eklenmektedir. 
*/
IF (SELECT Count(UserID) FROM XSS_User) > 5 
	Delete FROM XSS_User
	Where UserID IN (
		SELECT TOP 1 UserID 
		FROM (   
					SELECT UserID, ROW_NUMBER() 

bhdryrdm

[TestMethod]
public void ToPaginateList()
{
    University university = new University();
    List<Department> departmentList = university.Department.ToPaginateList(null, "DepartmentID", 8, 23);
}

bhdryrdm

[TestMethod]
public void ToList()
{
    University university = new University();
    List<Department> departmentList = university.Department.ToList();
}

bhdryrdm

[TestMethod]
public void Delete()
{
    University university = new University();
    Department willBeDeletedDepartment = university.Department.FirstOrDefault(x => x.DepartmentID == 1);
    university.Department.Delete(willBeDeletedDepartment);
    university.PushToDB();
}