Answer / p.ramakrishna

An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''

Answer / sathya s.d.

using sql query in a login id and password and automaticaly
login by verifying raw query with database..

I am opening Crystal Report in asp.Net 3.5. Report is opening very well but when I click on Refresh button of Crystal Report then it gives "Missing Parameter values" I also tried property of CR Viewer like crViewer.ReuseParameterValuesOnRefresh = True But it is not working. Plz give me solution.

1 Answers  

---

What is a web api? Which protocol is used in a web api?

0 Answers  

---

Explain the difference between panel and groupbox classes using .net?

0 Answers  

---

What are the new web part controls in asp.net 2.0 ?

0 Answers  

---

What is CSS? What is the advantage os using CSS in ASP.NET Web Applications?

2 Answers   PCS,

---

Diff B/W user control and server control

3 Answers  

---

How does session state work in asp.net?

0 Answers  

---

Why is global asax is used for?

0 Answers  

---

whats the purpose of AUTOPOSTBACK property for the controls in asp.net?

4 Answers  

---

How you can use video conferencing in asp.net? guys plz help me ...

2 Answers  

---

What is the difference between exe and dll?

0 Answers  

---

Is post back property in asp net?

0 Answers  

---