what is sql injection?

Answers were Sorted based on User's Feedback



what is sql injection?..

Answer / reva ram sahu

SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but also
modify and delete it. Certain SQL Servers such as Microsoft
SQL Server contain Stored and Extended Procedures (database
server functions). If an attacker can obtain access to these
Procedures it may be possible to compromise the entire
machine. Attackers commonly insert single qoutes into a
URL's query string, or into a forms input field to test for
SQL Injection. If an attacker receives an error message like
the one below there is a good chance that the application is
vulnerable to SQL Injection.

Is This Answer Correct ?    6 Yes 1 No

what is sql injection?..

Answer / a

It's a secuity vulnerability that occurs between the
database layer of an application.

Is This Answer Correct ?    5 Yes 1 No

Post New Answer

More SQL Server Interview Questions

After creating the cube, if we added a new column to the oltp table then how you add this new attribute to the cube? : sql server analysis services, ssas

0 Answers  


Do you know what is sql service broker?

0 Answers  


what is the information that can be stored inside a bit column? : Sql server database administration

0 Answers  


What is a field name?

0 Answers  


please give me query code of unique fuction select UNIQUE (name) from emp_info Incorrect syntax near the keyword 'UNIQUE'.

1 Answers   TCS,






Explain transaction server auto commit?

0 Answers  


What are logical database components? : SQL Server Architecture

0 Answers  


What is difference between commit and rollback when used in transactions?

0 Answers  


How do I list the available tables in a database I'm querying?

4 Answers  


What is factless fact table? : sql server analysis services, ssas

0 Answers  


Does transparent data encryption provide encryption when transmitting data across the network?

0 Answers  


Is it possible to delete duplicate rows in a table without using a temporary table ?

12 Answers   TCS,


Categories