Every article

Newest first, grouped by year. Search or filter by topic.

556 articles
·
2 matching

Filter by topic All .NET AI Engineering Architecture Azure & DevOps Data Warehousing Engineering Practice Microservices Web APIs sql-injection × View

19 Apr 2025

.NET 19 Apr 2025

Two Dynamic-SQL Procs — One Injectable, One Correct

The same database solves the same sortable-paging problem twice - once by concatenating user input straight into EXEC, once with a CASE whitelist, QUOTENAME and sp_executesql. A side-by-side of the wrong and right answer.

.NET · 5 min

06 Apr 2025

.NET 06 Apr 2025

A Report Builder Users Drag and Drop

Templates, columns, filters and group-bys stored in tables, a fluent WHERE/HAVING/ORDER builder that parameterises values but concatenates identifiers - self-service BI, second-order injection, and a handful of copy-paste bugs.

.NET · 6 min