Model-View-Controller (MVC) is the most common design pattern for implementing user interfaces. ASP.NET MVC is the Microsoft framework to implement the MVC software design pattern in ASP.NET. Developing by reusing known design patterns and frameworks that have been justified and tested by others brings a lot of reusability of known quantities into any application.

By breaking up the logic into controllers, which have the session, request, and response helper functions, while passing the models, which are the View Models which have the information which we want to present into the view, it moves most of the logic and exposure away from the browser where APIs can be exposed. We will also use Microsoft Entity Framework (EF) for many of the model objects.

Microsoft recommends using Language Integrated Query (LINQ) and EF to prevent traditional SQL injection attacks. The web page at https://msdn.microsoft.com/en-in/library/bb308959.aspx also discusses other security...