what is sql injection?
Answers were Sorted based on User's Feedback
Answer / reva ram sahu
SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but also
modify and delete it. Certain SQL Servers such as Microsoft
SQL Server contain Stored and Extended Procedures (database
server functions). If an attacker can obtain access to these
Procedures it may be possible to compromise the entire
machine. Attackers commonly insert single qoutes into a
URL's query string, or into a forms input field to test for
SQL Injection. If an attacker receives an error message like
the one below there is a good chance that the application is
vulnerable to SQL Injection.
| Is This Answer Correct ? | 6 Yes | 1 No |
Answer / a
It's a secuity vulnerability that occurs between the
database layer of an application.
| Is This Answer Correct ? | 5 Yes | 1 No |
how to find number of columns in a table in sql server 2000 and 2005 also
Determine how to use the inserted and deleted pseudo tables?
How the data stores in a page?
Stored Procedure returns data from multiple tables. How to access it in your ASP.Net code?
Is truncate autocommit?
Is oracle faster than sql server?
Write a query to get all details of employee who has maximum salary from employee table
What are the two virtual tables SQL Server maintains for triggers?
What is the Control Flow in SSIS
What are the dis_advantages of stored procedures, triggers, indexes?
What happens if ntwdblib.dll is missing on your machine?
MULTICAST DELEGATES IN C#.NET WITH REAL TIME EXAMPLE
Oracle (3259)
SQL Server (4518)
MS Access (429)
MySQL (1402)
Postgre (483)
Sybase (267)
DB Architecture (141)
DB Administration (291)
DB Development (113)
SQL PLSQL (3330)
MongoDB (502)
IBM Informix (50)
Neo4j (82)
InfluxDB (0)
Apache CouchDB (44)
Firebird (5)
Database Management (1411)
Databases AllOther (288)