Avoid hacking in asp.net websites

Hi,

check this link you can see how to avoid sql injections

http://msdn.microsoft.com/en-us/library/ff648339.aspx

All the Best

Insert into ITCircular(title,type,url1,url2) values('" + txttitle.Text + "','" + txttype.Text + "','" + path + "','" + path1 + "')

It is unsafe method to write query as above.We should use parametrized query.

to avoid website hacking ,
you can use encryption/Decryption techniques.

SQL Injection attacking is not just for login situations. If you want to avoid that type of attack during authentication, then don't use SQL, use Windows authentication or other, more secure, forms of authentication.

You can avoid SQL Injections types of attacks by using stored procedures or parameterized queries. Never concatenate a SQL string and never use unvalidated input from users.

http://msdn.microsoft.com/en-us/library/ms161953.aspx[^]

Restricting characters in the input is absolutely the wrong way to go about avoiding SQL injection (and cross site scripting) attacks. Instead, you should use parameterised queries – in .Net there is very little excuse for not doing so as it's very easy.