ASP.NET

<br />
        [NotifyParentProperty(true)]<br />
        [PersistenceMode(PersistenceMode.InnerProperty)]<br />
        [DesignerSerializationVisibility(DesignerSerializationVisibility.Content)]<br />
        public List<MenuBaseItem> items<br />
        {<br />
            get<br />
            {<br />
                return _items;<br />
            }<br />
        }<br />
<br />

<br />
        [NotifyParentProperty(true)]<br />
        [PersistenceMode(PersistenceMode.InnerProperty)]<br />
        [DesignerSerializationVisibility(DesignerSerializationVisibility.Content)]<br />
        public List<IMenuItem> items<br />
        {<br />
            get<br />
            {<br />
                return _items;<br />
            }<br />
        }<br />
<br />

• Hewlett Packard provides a free scanner, HP Scrawlr, that can identify whether sites are susceptible to SQL injection. It provides a report pages that are vulnerable along with the associated fields.
• A beta versoin of UrlScan restricts the types of HTTP requests that Internet Information Services (IIS) will process. UrlScan 3.0 installes on IIS 5.1 or later and can be found at URLScan Tool 3.0 Beta.
• You can check your source code with SQL Source Code Analysis Tool to detect ASP code that is susceptible. The tool can be found in Microsoft Knowledge Base Article 954476.
• The Security Advisory also contains additional links to best practices on how to avoid SQL injection attacks, including Coding Techniques for protecting against SQL Injection in ASP.NET and other articles.

<br />
under html<br />
<script language="javascript" type="text/javascript"><br />
		function calendarPicker(strField)<br />
		{<br />
	window.open('DatePicker.aspx?field=' + strField,'calendarPopup','width=250,height=190,resizable=yes');<br />
	}<br />
		</script><br />
<br />
<a href="javascript:;" onclick="calendarPicker('Form1.txtEventDate');" title="Pick Date from Calendar">pick</a>

Private Sub Calendar1_DayRender(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.DayRenderEventArgs) Handles Calendar1.DayRender<br />
    <br />
        e.Cell.Controls.Clear()<br />
<br />
     <br />
        Dim Link As System.Web.UI.HtmlControls.HtmlGenericControl<br />
        Link = New System.Web.UI.HtmlControls.HtmlGenericControl<br />
        Link.TagName = "a"<br />
        Link.InnerText = e.Day.DayNumberText<br />
        Link.Attributes.Add("href", String.Format("JavaScript:window.opener.document.{0}.value = '{1:d}'; window.close();", Request.QueryString("field"), e.Day.Date))<br />
<br />
    <br />
        If e.Day.IsSelected Then<br />
            Link.Attributes.Add("style", Me.Calendar1.SelectedDayStyle.ToString())<br />
        End If<br />
<br />
<br />
        '// Now add our custom link to the page<br />
        e.Cell.Controls.Add(Link)<br />
<br />
    End Sub