Golgappa.net | Golgappa.org | BagIndia.net | BodyIndia.Com | CabIndia.net | CarsBikes.net | CarsBikes.org | CashIndia.net | ConsumerIndia.net | CookingIndia.net | DataIndia.net | DealIndia.net | EmailIndia.net | FirstTablet.com | FirstTourist.com | ForsaleIndia.net | IndiaBody.Com | IndiaCab.net | IndiaCash.net | IndiaModel.net | KidForum.net | OfficeIndia.net | PaysIndia.com | RestaurantIndia.net | RestaurantsIndia.net | SaleForum.net | SellForum.net | SoldIndia.com | StarIndia.net | TomatoCab.com | TomatoCabs.com | TownIndia.com
Interested to Buy Any Domain ? << Click Here >> for more details...

When inserting strings into a SQL table in ASP what is the
risk and how can you prevent it?

Answer Posted / nandhu

The risk associated if not properly taken care of is
something called as "SQL Injection" attack.

This means you could

say in Username textfield on the html frontend or any
frontend, is possible to type something like the following
to by pass the security mechanism and get access to the
protected area of the site or application.

Type the following in Username or Password or both and
click on login/submit or equivalent button.

' or 'x' = 'x'

Is This Answer Correct ?    0 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

who will create the object?

1915


How to declare an array in vbscript?

1204


Explain about arrays in vb script?

1013


How to get the length of the string by making use of the string function?

1008


what is used of Property........End Property loop ? how to write the script for it?

2182


What is the use of the formatdatetime function in the vbscript language?

955


What are the valid scopes of a variable in vbscript?

1046


How are values assigned to string type and numeric type variables?

941


what is inner join? what is outer join? what is a constraint? tell me about rdbms? tell me about acid properties?

1859


Mention what is vbscript?

1052


What is difference between vbscript and vba?

1115


I have attended Anovatek Software QTP interview. They will give us computer and one web based application with QTP. We have to automate some records (already updated records or new records) using QTP Data driven testing. But we should use for loop? Can any one know how to do data driven testing using For loop?

1936


How will you get the octal value of the given number in vbscript?

910


Explain the string concatenation function in vbscript?

969


If a calulator having 3 buttons (of any number)in 3 of them one is not working properly due to which answer is wrong always. write a script to find out which button is not working properly ?

1968