what is meant by sql injection with example and one more
question how to catch the errors in sqlserver

Answer Posted / sudheer

sql injection attacks are used to steal information from a
database from which normally not be available and /or to
gain access to an organaization 's host computers through
the computer that is hosting the database.
EXAMPLE:
select email,pwd,login_id,fullname from members where
email='x'

Now somebody does not put 'x' as the input but
puts 'x ;drop table members;' so the actual sql wich will
execute is
select email,pwd,login_id,fullname from members where
email=x;drop table members;
Think once what happens to ur database.

Is This Answer Correct ?    8 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

Explain what is the main purpose of having conversation group?

510


What is create statement?

516


How can we solve concurrency problems?

551


How to download and install microsoft .net framework version 2.0?

538


how do you test proper tcp/ip configuration windows machine? : Sql server database administration

509






What is the name of the system variable that returns the number of rows affected by a SQL statement?

555


What are triggers? How do you invoke a trigger on demand?

734


How to make remote connection in database?

584


What is ssl in sql server?

537


Which is faster statement or preparedstatement?

520


Can you explain different types of locks in sql server?

514


What are the properties of the transaction?

531


What is indexed view?

584


How can we improve performance by using SQL Server profiler?

564


Explain linked server in sql?

682