sql injection in linq

Hi,
yes its avoided in Linq to SQL.
please refer the interesting articles

http://www.devx.com/dotnet/Article/34653

http://forums.asp.net/t/1884940.aspx?linq+prevent+sql+injection

Bhabani Prasad12y ago

In general sql injection is a technique used by hacker to steal your data or hamper your data by giving query at runtime in your application.so to avoid sqlinjection its better to use stored procedure for which it cant be occured

Princy Gupta12y ago

Hi

SQL injection is taken care of in linq queries.

LINQ to SQL passes all data to the database via SQL parameters. So, although the SQL query is composed dynamically, the values are substitued server side through parameters safeguarding against the most common cause of SQL injection attacks.

Found an interesting article @http://www.dotnetspark.com/kb/2040-eliminate-sql-injection-attacks-with-linq.aspx