Answer Posted / p.ramakrishna
An SQL injection attack "injects" or manipulates SQL code
by adding unexpected SQL to a query.
Many web pages take parameters from web user, and make SQL
query to the database. Take for instance when a user login,
web page that user name and password and make SQL query to
the database to check if a user has valid name and password.
Username: ' or 1=1 ---
Password: [Empty]
This would execute the following query against the users
table:
select count(*) from users where userName='' or 1=1 --' and
userPass=''
| Is This Answer Correct ? | 5 Yes | 1 No |
Post New Answer View All Answers
Explain server-side scripting and client-side scripting.
Explain a program using razor view engine to create a simple application? : asp.net mvc
Where viewstate value is stored in asp.net?
Define the term Web Garden?
How many types of file extensions for razor views in ASP.Net MVC?
What is true about application service provider?
COM+ Used ________________ Isolation Level
Is asp.net mvc still used? : Asp.Net MVC
Explain the function of new view engine in asp.net? : asp.net mvc
Why mvc is faster than asp.net? : Asp.Net MVC
Explain how is the asp.net mvc architecture different from others? : asp.net mvc
6. Tell us about a time when you failed to meet a deadline. What were the repercussions?
Explain the difference between asp.net mvc and asp.net webforms? : asp.net mvc
What is query string in asp.net?
What are web beacons used for?