What is SQL injection?
Answers were Sorted based on User's Feedback
Answer / p.ramakrishna
An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''
Is This Answer Correct ? | 5 Yes | 1 No |
Answer / sathya s.d.
using sql query in a login id and password and automaticaly
login by verifying raw query with database..
Is This Answer Correct ? | 0 Yes | 0 No |
Can a .net web application consume java web service?
What is difference between inproc and outproc?
What are Authentication and Authorization?
Different type of validation controls in asp.net ?
1 Answers CTS, Keane India Ltd,
What is the name of the process the browser uses to find the address of a web server? a) DMZ b) DNS c) Active Directory d) Database lookup
Suppose there is one web farm with 3 servers inside with same configuration and the same project is running inside all servers.Which session mode is usde for all these and why?
How many types of cookies are there in asp.net?
How to fetch a data from one table to another table in asp.net ?
How do you insert multiple rows from a grid view to database table under a single transaction?
Explain the function of new view engine in asp.net? : asp.net mvc
Using Statement usage in C#
What is Partial in ASP.NET 2.0?