what is meant by sql injection with example and one more
question how to catch the errors in sqlserver

Answers were Sorted based on User's Feedback



what is meant by sql injection with example and one more question how to catch the errors in sqlse..

Answer / sudheer

sql injection attacks are used to steal information from a
database from which normally not be available and /or to
gain access to an organaization 's host computers through
the computer that is hosting the database.
EXAMPLE:
select email,pwd,login_id,fullname from members where
email='x'

Now somebody does not put 'x' as the input but
puts 'x ;drop table members;' so the actual sql wich will
execute is
select email,pwd,login_id,fullname from members where
email=x;drop table members;
Think once what happens to ur database.

Is This Answer Correct ?    8 Yes 0 No

what is meant by sql injection with example and one more question how to catch the errors in sqlse..

Answer / kanan

how to catch the errors in sqlserver?

BEGIN TRY
SELECT 1/0
END TRY

BEGIN CATCH
RETURN ERROR_NUMBER()
RETURN ERROR_MESSAGE()
RETURN ERROR_LINE()
END CATCH

Is This Answer Correct ?    6 Yes 0 No

Post New Answer

More SQL Server Interview Questions

what is hash table

3 Answers   ILFS, Teledata,


How to find tables without indexes?

0 Answers  


how do u do Performance tunning ?

1 Answers   Infodat Technologies, Satyam,


Write a query to get all details of employee who has maximum salary from employee table

8 Answers   AON, Genpact,


What is user-defined multi-statement table-valued function?

0 Answers  






what is index seek and index scan?

2 Answers  


What is a Trace frag?Where can we use this?

1 Answers  


What is transaction server distributed transaction?

0 Answers  


What is the recommended total size of your memory optimized tables?

0 Answers  


What are the source of constraints?

0 Answers  


How can we check the sql server version?

0 Answers  


What is multi-statement table-value user-defined function?

0 Answers  


Categories