Answer Posted / sachin
"An attack technique used to exploit web sites by altering
backend SQL statements through manipulating application
input."
SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but
also modify and delete it. Certain SQL Servers such as
Microsoft SQL Server contain Stored and Extended Procedures
(database server functions). If an attacker can obtain
access to these Procedures it may be possible to compromise
the entire machine. Attackers commonly insert single qoutes
into a URL's query string, or into a forms input field to
test for SQL Injection. If an attacker receives an error
message like the one below there is a good chance that the
application is vulnerable to SQL Injection.
| Is This Answer Correct ? | 1 Yes | 0 No |
Post New Answer View All Answers
what r the measure bugs found in your project??? Give some example abt this.
What is the test case?
What are the disadvantages of manual testing?
Describe to me what you see as a process. Not a particular process, just the basics of having a process.
If client give you a project then which testing you will perform first
What r all the security problems u r facing & the measures taken to solve.
1. what exactly is heuristic checklist approach for unit testing ?
Hi, Can anyone suggest a test case writing technique for the below scenario. 1. User draws a lines on the image 2. User selects the lines and right clicks ( Measuremnts like distance between the start and the end point, coordinates of start point and coordinates of end point) 3. User selects one of the measurement Measurement is displayed Just want to highlight, i am looking for a test case writing technique for above scenario.
what is conditional testing? explain and examples
Hi Please tell me about ERP Project how do describe in interview Please tell me details about this project my id is chiku_69@yahoo.in
Hi Friends, I have completed 3 rounds of an Interview with HR discussion also and got Offer letter from Cognizant, but after in 30 min they send one more email like Offer is on Hold, and its not valid... Could you please guide me any one , Can i expect Offer again from Cognizant or Can i drop the hopes ?.
What is PBX Testing & What is Test coverage?
Hi Friends, Just One Month Back I was Join in Small Company as a Testing Eng.I have Six Month Exp. In this Company all my team memb.r fresher & PM give responsibility on us to prepare all require QC doc. for our new project.So I need ur help in this matter .How Can I start my work and Which Doc.I start to collect & From Where I get Detail Information all abt these thing. Thanks to all friends who give reply to this. Suyog
What is the difference between code walkthrough and code review? What is the difference between walkthrough and inspection?
1.what is a test condition ?