Hi all, I have a website that allows users to enter data into a website using a mix of formview, gridview and detailsview as well as using textboxes and vb.net. The users at this website are numbering 3 maximum (total) and all will be set up with an account and provided with a username and strong password.
My question is: How much consideration should I give to protecting against sql injection, script injection etc. If I utterly trust the user(s). If a person tries to access the site, I am using server.transfer to redirect people to the login page until they are sucessfully authenticated.
I'm still pretty new to this, so any input will be most appreciated.
Thanks!
...
Go to the complete details ...