From Microsoft: Source Code Analyzer for SQL Injection
This is a nice little application that checks your code for areas that might allow SQL Injection. Considering how easy it is to write code that allows SQL injection, this free little application is a must-have for preventing SQL injection.
Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Customers can run the tool on their ASP source code to help identify code paths that are vulnerable to SQL Injection attacks.
This is an extremely useful application. It is surprisingly difficult to write code code that is not subject to SQL injection. Even if you’re a master coder,use this application as a final test to make sure that SQL injection is not an issue.









