What is SQL injection?

Answers were Sorted based on User's Feedback



What is SQL injection?..

Answer / p.ramakrishna

An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''

Is This Answer Correct ?    5 Yes 1 No

What is SQL injection?..

Answer / sathya s.d.

using sql query in a login id and password and automaticaly
login by verifying raw query with database..

Is This Answer Correct ?    0 Yes 0 No

Post New Answer

More ASP.NET Interview Questions

Can a .net web application consume java web service?

0 Answers  


What is difference between inproc and outproc?

0 Answers  


What are Authentication and Authorization?

0 Answers  


Different type of validation controls in asp.net ?

1 Answers   CTS, Keane India Ltd,


What is the name of the process the browser uses to find the address of a web server? a) DMZ b) DNS c) Active Directory d) Database lookup

1 Answers   Syntax Softtech,






Suppose there is one web farm with 3 servers inside with same configuration and the same project is running inside all servers.Which session mode is usde for all these and why?

3 Answers  


How many types of cookies are there in asp.net?

0 Answers  


How to fetch a data from one table to another table in asp.net ?

0 Answers   MCN Solutions,


How do you insert multiple rows from a grid view to database table under a single transaction?

1 Answers  


Explain the function of new view engine in asp.net? : asp.net mvc

0 Answers  


Using Statement usage in C#

2 Answers  


What is Partial in ASP.NET 2.0?

2 Answers   Fulcrum Logic,


Categories