ASP, SQL vulnerability related principles and prevention