what is meant by sql injection with example and one more
question how to catch the errors in sqlserver
Answer Posted / sudheer
sql injection attacks are used to steal information from a
database from which normally not be available and /or to
gain access to an organaization 's host computers through
the computer that is hosting the database.
EXAMPLE:
select email,pwd,login_id,fullname from members where
email='x'
Now somebody does not put 'x' as the input but
puts 'x ;drop table members;' so the actual sql wich will
execute is
select email,pwd,login_id,fullname from members where
email=x;drop table members;
Think once what happens to ur database.
| Is This Answer Correct ? | 8 Yes | 0 No |
Post New Answer View All Answers
How adventureworkslt tables are related?
What are types of storage modes? : sql server analysis services, ssas
What is the main purpose of having conversation group?
What is open database communication (odbc)?
What is log cache in sql server?
How can delete duplicate records in cte in sql server?
I create a separate index on each column of a table. What are the advantages and disadvantages of this approach? : Sql server database administration
What is self contained multi valued query?
Do you know what are the properties of the relational tables?
Can we shrink data file in sql server?
To automatically record the time on which the data was modified in a table, which data type should you choose for the column?
Define msdb database?
How to find Duplicate Records In table?
What is the difference between dataadapter and datareader?
How to view existing indexes on an given table using sp_help?