When inserting strings into a SQL table in ASP what is the
risk and how can you prevent it?

Answer Posted / nandhu

The risk associated if not properly taken care of is
something called as "SQL Injection" attack.

This means you could

say in Username textfield on the html frontend or any
frontend, is possible to type something like the following
to by pass the security mechanism and get access to the
protected area of the site or application.

Type the following in Username or Password or both and
click on login/submit or equivalent button.

' or 'x' = 'x'

Is This Answer Correct ?    0 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

How will you release the memory acquired by an array variable in vbscript?

747


Explain about tristate constants in vbscript?

618


Explain the adodb.stream class?

548


How will you get a random number between 0 and 1 in vbscript?

720


How to write a VBscript for web page performance test i need a code send if any knows the code If any knows VBScript book plz send to me the link to my mail plz

2391






Mention if qtp generates vbscript code as we record actions, can't it possible to directly write using vbscript code when qtp does the same thing too?

528


Explain the scope of the variables using dim, public, and private keywords respectively.

724


What if you do not specify anything when you call a procedure?

540


filter the array values without using filter function?

1657


1. How to handle object implementation change in DP for Ex: i have login page with username,pasword (editboxes),login,cancel(buttons). Here i written DP code for login page with the help properties. My questions: 1.If properites are changing dynamically i will do (i want code for that) 2.if objects are changed dynamcally i will do (i wnat code for that)

1616


write a function to read the items from combobox of Flight reservation & save in excel (QTP)??

2398


What methods are used to create text files and open text files in the vbscript language?

538


what is the features of visual basic?

1556


How to use QTP Object in .vbs(vbscript file) file Ex: Browser().., wait(), exist() and etc...

2905


How to write functions and sub in vb script?

625