Answer Posted / p.ramakrishna
An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''
| Is This Answer Correct ? | 5 Yes | 1 No |
Post New Answer View All Answers
What is the full meaning of asp.net?
How can we use Web API with ASP.NET Web Form?
What is the use of express session?
How can we create custom controls in asp net?
What is mvc in asp.net interview question? : Asp.Net MVC
What is the difference between page.registerclientscriptblock and page.registerstartupscript?
What is application and session in asp.net?
Explain what does wsdl stand for?
Why is asp.net so popular?
What is the difference between response.redirect and server.transfer?
What is postback pixel?
What is a page life cycle?
What are the different types of sessions in asp.net?
When you are running a component within ASP.NET, what process is it running within on Windows XP? Windows 2000? Windows 2003?
Which is an advantage of application service providers?
