What is SQL injection?

Answers were Sorted based on User's Feedback



What is SQL injection?..

Answer / p.ramakrishna

An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''

Is This Answer Correct ?    5 Yes 1 No

What is SQL injection?..

Answer / sathya s.d.

using sql query in a login id and password and automaticaly
login by verifying raw query with database..

Is This Answer Correct ?    0 Yes 0 No

Post New Answer

More ASP.NET Interview Questions

Who is using asp.net?

0 Answers  


What is page request in asp.net?

0 Answers  


1.how to encrpt query string in asp.net? 2.there are 10000 records then i wnat display 5000 records one gridview and 5000 records another grid view what is the process?

0 Answers   Marlabs,


How do you relate an aspx page with its code behind page ?

4 Answers   Accenture, BirlaSoft,


What is the T-SQL equivalent of IIF (immediate if/ternary operator) function of other programming languages?

1 Answers   Syntax Softtech,


About the Usage of htmlencode and urlencode ?

2 Answers   Cognizant,


what is caching

3 Answers  


What is the difference between application and cache variables?

6 Answers   Astadia,


What data type does the Range Validator control support?

5 Answers  


How to do Caching in ASP?

1 Answers  


where should write the connection string Show that it will apply whole pages in the website

5 Answers   Symco,


What is the equivalent of date() and time() in asp.net?

0 Answers  


Categories