I need to avoid being vulnerable to SQL injection in my ASP.NET application. How might I accomplish this?
Use XSS Secured UrlEncode using Microsoft.Security.Application.AntiXss.UrlEncode and SQL injection will not work. Or You can use ASP.NET – JSON – Serialization and Deserialization
Also test your application with SiteDigger from Macfee Fre Tool.
Few More are from here
.NET Security Toolkit v1.0 .NETMon v1.0 Validator.NET v1.0