Answer Posted / p.ramakrishna
An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''
| Is This Answer Correct ? | 5 Yes | 1 No |
Post New Answer View All Answers
What is windows active directory authentication?
How can we use Web API with ASP.NET Web Form?
Differentiate between globalization and localization.
Is asp.net and .net are same or different?
What is a response cookie?
What does passport and windows authentication mean in ASP.NET?
What is asp according to you?
How do I open an ashx file in windows 7?
What is form method?
What is the difference between web.config and machine.config in ASP.NET?
What are cookies in your browser?
What is a session in programming?
Can you set which type of comparison you want to perform by the comparevalidator control?
Explain diff. Between friend and protected friend?
What are client activated objects?
