what is sql injection?
Answers were Sorted based on User's Feedback
Answer / reva ram sahu
SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but also
modify and delete it. Certain SQL Servers such as Microsoft
SQL Server contain Stored and Extended Procedures (database
server functions). If an attacker can obtain access to these
Procedures it may be possible to compromise the entire
machine. Attackers commonly insert single qoutes into a
URL's query string, or into a forms input field to test for
SQL Injection. If an attacker receives an error message like
the one below there is a good chance that the application is
vulnerable to SQL Injection.
| Is This Answer Correct ? | 6 Yes | 1 No |
Answer / a
It's a secuity vulnerability that occurs between the
database layer of an application.
| Is This Answer Correct ? | 5 Yes | 1 No |
What is oltp (online transaction processing)?
What are the advantages of using stored procedures?
What is "scheduled jobs" or "scheduled tasks"?
What is star, snowflake and star flake schema? : sql server analysis services, ssas
Can a rule be bound to any column of any data type?
What are translations and its use? : sql server analysis services, ssas
Why is normalisation important?
What should be the fill factor for indexes created on tables? : sql server database administration
Is the log file is a part of file group?
What is a data source file?
Why do we need different type of parameter?
When we can say that is in BCNF?
Oracle (3259)
SQL Server (4518)
MS Access (429)
MySQL (1402)
Postgre (483)
Sybase (267)
DB Architecture (141)
DB Administration (291)
DB Development (113)
SQL PLSQL (3330)
MongoDB (502)
IBM Informix (50)
Neo4j (82)
InfluxDB (0)
Apache CouchDB (44)
Firebird (5)
Database Management (1411)
Databases AllOther (288)