what is sql Injection?
Answers were Sorted based on User's Feedback
Answer / alok saxena
SQl Injection is used by hacker or professional to damage
the data through intellectaul technique. For example, in
this text box , If I write SQL statement in such a way that
effect its database. example " hi, 'delete * from emp;'
This is what We say to inject in Sql by writing DML in
textbox.
Is This Answer Correct ? | 7 Yes | 1 No |
Answer / kerem kusmezer
Sql Injection is one of the input manipulation attacks,
which in case the sql statement is directly buildup from an
string concatanation, in which the user can change through
entry the result sql statement.
For Example:
select top 1 username from users where username
= '&txtusername.Text&'.
If the user enters the text with ' or -- he can add more
command to the outcoming sql statement and change the query
set.
Is This Answer Correct ? | 2 Yes | 0 No |
Answer / srikant dwibedi
SQL Injection is he process of passing SQL code into an
application in a way that was not intended by the
application developer or it is a strategy for attacking
databases.
Example
An ASP page asks the user for a name and a password.
SELECT FROM users WHERE username="whatever" AND
password="mypassword".
It seems safe,but it is not. A user might enter somthing
like this 'OR 1>0....
when this is plugged into the SQL statewments the result
looks like this:
SELECT FROM users WHERE username="OR 1>0 " AND
password=" ";
This injectin comments out of the password portion of the
statement. It results in a list of all the names in the
users table. So any user could get into your system.
Is This Answer Correct ? | 3 Yes | 2 No |
How to you declare connection strings and how to you make use of web.config ?
Why is ADO.NET serialization slower than ADO ?
Explain the difference in an abstract class and an interface?
What is bubbled event can you please explain?
how to create a quiz software using 4 options to answer and how to check with answers in the database and award marks....
Can I use One Data Set for More than one Data Adapter?
Which is the best method to get two values from the database?
How to Read, Add, Update and Delete record in Entity Framework ?
What are the three Ado objects?
6 Answers Microsoft, StarSoft,
What is the full form of ado.net?
Explain sqlconnection object?
How can we load multiple tables in to dataset?