Answer Posted / kerem kusmezer
Sql Injection is one of the input manipulation attacks,
which in case the sql statement is directly buildup from an
string concatanation, in which the user can change through
entry the result sql statement.
For Example:
select top 1 username from users where username
= '&txtusername.Text&'.
If the user enters the text with ' or -- he can add more
command to the outcoming sql statement and change the query
set.
| Is This Answer Correct ? | 2 Yes | 0 No |
Post New Answer View All Answers
Which method in OLEDBAdapter is used to populate dataset with records?
What is difference between datatable and dataset?
What is ado.net components?
How we can provide data to ado.net?
How do you update a dataset in ado.net?
What is disconnected architecture in ado.net?
What is a string variable?
Which is faster dataset or datareader?
How do we use stored procedure in ADO.NET and how do we provide parameters to the stored procedures?
Describe datareader object of ado.net with example.
What is ado asp?
What does ole stand for in excel?
Which namespaces are used for data access?
What is read only and forward only in ado.net?
Define table relations?