Wht is SQL injection?

Question Posted / mustafa

3 Answers
8052 Views
I also Faced
E-Mail Answers

Answers were Sorted based on User's Feedback

Wht is SQL injection?..

Answer / sachin

"An attack technique used to exploit web sites by altering
backend SQL statements through manipulating application
input."

SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but
also modify and delete it. Certain SQL Servers such as
Microsoft SQL Server contain Stored and Extended Procedures
(database server functions). If an attacker can obtain
access to these Procedures it may be possible to compromise
the entire machine. Attackers commonly insert single qoutes
into a URL's query string, or into a forms input field to
test for SQL Injection. If an attacker receives an error
message like the one below there is a good chance that the
application is vulnerable to SQL Injection.

Is This Answer Correct ?

1 Yes

0 No

Wht is SQL injection?..

Answer / babuni

SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.

Is This Answer Correct ?

0 Yes

0 No

Wht is SQL injection?..

Answer / pravati

sql injection is an attack in which malicious code is inserted to expose hidden data or to override valuable ones.

Is This Answer Correct ?

0 Yes

0 No

Post New Answer