Answer / p.ramakrishna

An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''

Answer / sathya s.d.

using sql query in a login id and password and automaticaly
login by verifying raw query with database..

What are the Difference between asp.net and asp ?

0 Answers  

---

What are session state modes? List some of the important session state modes of asp.net.

0 Answers  

---

In which situation can you not use a viewstate?

0 Answers  

---

Explain the advantages of asp.net.

0 Answers  

---

What is the Impprsonation?and what is the importence of that?

3 Answers   eXensys,

---

Which method is used to perform all validation at the page level?

0 Answers   Sans Pareil IT Services,

---

How many web.config a application can have ?

6 Answers   Keane India Ltd, Manhattan, Vertex,

---

What is the web.config file in asp?

0 Answers  

---

What are the differences between the response.write() and response.output.write()?

0 Answers  

---

What is Web Gardening? How would using it affect a design ?

1 Answers   Infogain,

---

How ViewstateMac works?

0 Answers   CGI,

---

What are Authentication and Authorization?

0 Answers  

---