What is SQL injection?
Answers were Sorted based on User's Feedback
Answer / p.ramakrishna
An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''
Is This Answer Correct ? | 5 Yes | 1 No |
Answer / sathya s.d.
using sql query in a login id and password and automaticaly
login by verifying raw query with database..
Is This Answer Correct ? | 0 Yes | 0 No |
Who is using asp.net?
What is page request in asp.net?
1.how to encrpt query string in asp.net? 2.there are 10000 records then i wnat display 5000 records one gridview and 5000 records another grid view what is the process?
How do you relate an aspx page with its code behind page ?
4 Answers Accenture, BirlaSoft,
What is the T-SQL equivalent of IIF (immediate if/ternary operator) function of other programming languages?
About the Usage of htmlencode and urlencode ?
what is caching
What is the difference between application and cache variables?
What data type does the Range Validator control support?
How to do Caching in ASP?
where should write the connection string Show that it will apply whole pages in the website
What is the equivalent of date() and time() in asp.net?