Posted on: 2/23/2013 6:38:30 PM | Views : 1211

Hi, 
I am Posting this thread third time but i no one is helping me out. 


I have a url like this http://localhost:49994/Detail.aspx?ID=2
What i am doing is. 
I am changeing the select command of my sqldatasource from code behind. 
Here is code
Sqldatasource1.SelectCommand = "Select * from details where ID=" + Request.QueryString("ID") But When i put ' after this Url its showing me Unclosed quotation mark after the character string ''. So Its means its easily injectable by Sql injection. 

Please guide me with code that how can i read values safely from datasource through querystring. 


Thanks a Lot

...

Go to the complete details ...