what is sql injection?
Answers were Sorted based on User's Feedback
Answer / reva ram sahu
SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but also
modify and delete it. Certain SQL Servers such as Microsoft
SQL Server contain Stored and Extended Procedures (database
server functions). If an attacker can obtain access to these
Procedures it may be possible to compromise the entire
machine. Attackers commonly insert single qoutes into a
URL's query string, or into a forms input field to test for
SQL Injection. If an attacker receives an error message like
the one below there is a good chance that the application is
vulnerable to SQL Injection.
| Is This Answer Correct ? | 6 Yes | 1 No |
Answer / a
It's a secuity vulnerability that occurs between the
database layer of an application.
| Is This Answer Correct ? | 5 Yes | 1 No |
What is the new security features added in sql server 2016? : sql server security
How to enter binary string literals in ms sql server?
Explain error handling in ssis?
Is it possible for a stored procedure to call itself or recursive stored procedure? How many levels of sp nesting are possible?
Do you know what is normalization of database? What are its benefits?
What are the different types of indexes?
what is the out put of below queries? a. select * from Emp where null = null; b. select * from Emp where 1=1;
How do I view a stored procedure in sql server query?
What is SQL Profiler and the use of it?
please tell me the query to get details of the employee having the second largest salary
what is the output for this query select * from employee where 1=1;
SQL stops working in every 15 days displaying message that database log file is full. Log file size is 3.95 GB. It is happening after shrinking the database also. What is solution to overcome this problem. Please help me as it's urgent.
Oracle (3259)
SQL Server (4518)
MS Access (429)
MySQL (1402)
Postgre (483)
Sybase (267)
DB Architecture (141)
DB Administration (291)
DB Development (113)
SQL PLSQL (3330)
MongoDB (502)
IBM Informix (50)
Neo4j (82)
InfluxDB (0)
Apache CouchDB (44)
Firebird (5)
Database Management (1411)
Databases AllOther (288)