One of the basic but important security issues in web development that you should pay attention to is SQL Injection. Recently HP released a free tool called Scrawlr to test such vulnerabilities.

This tool checks your pages using a simple crawler or Google query and find any SQL Injection problems. This tool can only check issues on GET parameters.

You can check up to 1500 URL in each web site using this free tool.

Download: https://download.spidynamics.com/Products/scrawlr/

It’s so easy to use powerful ASP.NET Membership, Role and Profile provider in a Windows or Console application. Only one key point remains here; you should add an app.config file to your Console or Windows application and include these nodes in that:

          <?
          xml
          version
          ='1.0'
          encoding
          ='utf-8'?><configuration><connectionStrings><addname="SQLConnString"connectionString="SERVER=(local);DATABASE=SampleApp;UID=sa;PWD=123"/></connectionStrings><system.web><membershipdefaultProvider="SampleAppMembershipProvider"><providers><addname="SampleAppMembershipProvider"connectionStringName="SQLConnString"applicationName="SampleAppMembership"enablePasswordReset="true"enablePasswordRetrieval="false"passwordFormat="Hashed"maxInvalidPasswordAttempts="100"minRequiredPasswordLength="5"minRequiredNonalphanumericCharacters="0"requiresQuestionAndAnswer="false"requiresUniqueEmail="true"passwordAttemptWindow="5"passwordStrengthRegularExpression=""type="System.Web.Security.SqlMembershipProvider"/></providers></membership><profiledefaultProvider="SampleAppProfileProvider"><providers><addname="SampleAppProfileProvider"type="System.Web.Profile.SqlProfileProvider"connectionStringName="SQLConnString"/></providers><properties><addname="FirstName"type="System.String"/><addname="LastName"type="System.String"/><addname="Email"type="System.String"/><addname="Website"type="System.String"/><addname="Address"type="System.String"/><addname="Note"type="System.String"/><addname="Phone"type="System.String"/><addname="Fax"type="System.String"/><addname="Feature"type="System.Int32"/></properties></profile><roleManagerenabled="true"cacheRolesInCookie="true"defaultProvider="SampleAppSqlRoleProvider"
cookieName=".ASPXSampleAppROLES"cookiePath="/"cookieTimeout="30"cookieRequireSSL="false"
cookieSlidingExpiration="true"createPersistentCookie="false"cookieProtection="All"><providers><clear/><addname="SampleAppSqlRoleProvider"type="System.Web.Security.SqlRoleProvider, 


System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="SQLConnString"applicationName="SampleAppRoles"/></providers></roleManager></system.web></configuration>

Recently (and specially after Web 2.0 revolution) many websites started to use more complicated CAPTCHA solutions on their websites in order to prevent spam and bot attacks. There are many free solutions and tools for users and developers to implement CAPTCHA technology in their applications. There are also many ASP.NET controls and components for this approach but many of them are so simple to hijack or don't offer features that these days we see on professional websites (some features like reload function, voice, etc.).

A few days ago I found a link to reCAPTCHA on Yahoo!. reCAPTCHA is a free (but professional) tool for basic users and also developers. To use this service you should first signup, receive an API Key for your website (you can receive as many as you need) and use one of easy-to-install plugnins provided. And good news for ASP.NET developers is that you can download and use a server side control and enjoy reCAPTCHA with two lines of code! The API Key guarantees your website and prevents attackers collect answers from visitors and use them. There are three different themes to choose.

If you want to use reCAPTCHA on a Web 2.0 website you can use AJAX API just by adding this line of code to you html or webform file: I strongly suggest you download and test this tool in your web applications.

Quick Links: reCAPTCHA.net | Live Demo | Why reCAPTCHA | Signup | reCAPTCHA.NET Control | Email Protection With reCAPTCHA

• Cleanup inactive anonymous users from ASP.NET Membership Tables
• Prevent Denial of Service (DOS) attacks in your web application
• 13 disasters for production website and their solutions

Sometimes it happend that you want to search for something on the web and don't find your desired results in your favorite search engine, you may decide to try another search engine to find the answer. Here's a better and easier way for such times!

metacrawler.com is a website which enjoys metasearch technology to gather best results from various search engines including Google, Yahoo! Search, MSN Search, Ask Jeeves, About, MIVA, LookSmart and more.

You can see all results from all search engines together or select a search engine and see its results only.