Database.ExecuteSqlCommand is very useful when leveraging Entity Framework 4.1/4.2 Code First model to do the data access or object relational mapping. To make sure your code is bullet proof for SQL injection attacks, you must use the parameterized SQL script when calling this method. Following is an example for this purpose.
context.Database.ExecuteSqlCommand(“delete MasterSmsCampaignCertificateInfo where MasterSmsCampaignGuid = @p0 and CertificateId = @p1“,
TheCampaignGuid,
certInfo.CertificateId);
). It’s also been a while that I have told myself countless times that it is time to record this or that into a web log but since I don’t have one and I have to forget about the writing ideas.
.jpg?psid=1 "View album")
