In our security testing we are injecting sql commands "pg_sleep(1)" & "case when cast" to the web URL's, the expected behaviour is to redirect the users to the home page, but unfortunately it is continuously loading in the web browser with a timeout error.
Example URLs : http://<website.com>/get-started/contact-us?view=contactus;select%20pg_sleep%281%29;%20--
We are assuming that IIS 7.5 server is not sending the response. As it is a security threat to our website, could you please send us your thoughts to fix this. These sql command UrL's has to re-direct the user to the homepage.