Answer / venkat reddy.ravu

SQL injection is nothing but inserting malicious code with
the strings and later which will pass to the particular SQL
server instances which may damage the database or may
corrupt bthe data

For exaple:


var EmpName;
EmpName= Request.form ("EmpName");
var sql = "select * from Employee where EmpName= '" +
EmpName+ "'";


If you considers the above query and if user prompts to
enter the input as Scott,

Then query processed like this

select * from Employee where EmpName='Scott'

If user enters the input as below,

Scott,drop table Employee
In this case your query will be processed as below

select * from Employee where Ename='Scott',drop table emp

So,first select statement will be executed and then table
will be dropped.

Nothing but without standard of coding an expertised user
may damages or corrupt the databases.

To avoid SQL injection attacks:-
1)Use Parameterized Input with Stored Procedures
2)Use the Parameters Collection with Dynamic SQL
3)Filtering Input
4)LIKE Clauses

Answer / pankaj kumar

SQL injection is something where an end user of an application is able to submit SQL queries through the user interface and end up running those queries, causing potential damage to the database.

What is query cost in sql server?

0 Answers  

---

What is the difference between in and exists. Ex: select * from emp where empno in(....) and select * from emp where empno exists(....) What is the difference between a Join and Union and Union and UnionAll.

5 Answers   ABC, Accenture,

---

What is the difference between commit and rollback?

0 Answers  

---

Does server sql treat char as a variable-length or fixed-length column?

0 Answers  

---

What is the temp table?

0 Answers  

---

How to insert a new row into a table with "insert into" statements in ms sql server?

0 Answers  

---

What is the SQL?????????????????????????????

5 Answers   CMS,

---

What is optimization and its types?

0 Answers  

---

Explain about integration services of Microsoft SQL server?

0 Answers  

---

What is the purpose of linked server configuration in sql server?

0 Answers  

---

How many primary keys are possible in a table?

0 Answers  

---

What is subquery explain with example?

0 Answers  

---