C#

I need to design class library for sql injection prevention by using ASP.NET with C# When the application server received input from the user, it dynamically generated the query based on the input. This query, along with the developer-intended query made use of keyword randomization, where the randomly generated key was appended to the SQL keywords in both queries. These queries were then forwarded to an XML parsing component, which converted both queries into XML trees. and comparing the corresponding nodes in these sub-stacks by using multiple threads, and based on the result of comparison, the algorithm was able to determine whether the dynamically built query was an attack or not. If this query was non-malicious, it was allowed to pass further to the database server for execution. However, if the algorithm determined a query as an attack, it was blocked at the application server and was not sent to the database server for execution. The attack queries were added to an error log to help the system administrators to My Email : [DELETED]@gmail.com

public bool PushToDatabase(DataCollection data)
{
 try
 {
  // insert data in database
  PerformDatabaseInsert(data);
  // then update the visual
  App.Current.Dispatcher.Invoke(new Action(() => lst_MyData.ItemsSource = data.ToArray()));
  return true;
 }
 catch (Exception ex)
 {
  // Display error to user
  return false;
 }
}

private void btn_Submit_Click(object sender, RoutedEventArgs e)
{
 if (InputsAreGood())
 {
  DataCollection data = GetFormFields();

  Thread thread = new Thread(() =>
  {
   MainWindow.SetCursor_Wait(); // visual candy via the Dispatcher

   if (PushToDatabase(data))
   {
    ClosePopOutControl();
   }

   MainWindow.SetCursor_Arrow();
  });

  thread.Start();
 }
 else
 {
  // inform user what they missed
 }
}

public async Task UpdateListViewAsync(DataCollection data)
{
 // Dispatcher is awaitable, so no problems here
 await Dispatcher.Invoke(() =>
 {
  // but you cannot await a void so I have to rewrite it to this
  return Task.Run(() => { lst_MyData.ItemsSource = data.ToArray(); });
 }
}

public async Task<bool> PushToDatabaseAsync(DataCollection data)
{
 Task<bool> dataPushTask = Task.Run(() => PushToDatabase(data));
 bool result = await dataPushTask;
 await UpdateListViewAsync();
 return result;
}

private btn_Submit_Click(object sender, RoutedEventArgs e)
{
 bool taskResult;

 try
 {
  MainWindow.SetCursor_Wait();

  if (InputsAreGood())
  {
   DataCollection data = GetFormFields():

   Func<Task<bool>> dataPushLambda = async () => await PushToDatabaseAsync(data); 
   taskResult = await App.Current.Dispatcher.InvokeAsync(dataPushLambda).Result;

   if (taskResult)
   {
    ClosePopOutForm();
   }
   else
   {
    // tell user that something went wrong
   } 
  }
  else
  {
   // tell user what fields they missed
  }
 }
 catch (Exception ex)
 {
  // display the error to the user
 }
 finally
 {
  MainWindow.SetCusor_Arrow();
 }
}

Func<Task<bool>> dataPushLambda = async () => await PushToDatabaseAsync(data); 
taskResult = await App.Current.Dispatcher.InvokeAsync(dataPushLambda).Result;

taskResult = await App.Current.Dispatcher.InvokeAsync(dataPushLambda).Result;
// and
taskResult = await await App.Current.Dispatcher.InvokeAsync(dataPushLambda);