what is meant by sql injection with example and one more
question how to catch the errors in sqlserver
Answer Posted / sudheer
sql injection attacks are used to steal information from a
database from which normally not be available and /or to
gain access to an organaization 's host computers through
the computer that is hosting the database.
EXAMPLE:
select email,pwd,login_id,fullname from members where
email='x'
Now somebody does not put 'x' as the input but
puts 'x ;drop table members;' so the actual sql wich will
execute is
select email,pwd,login_id,fullname from members where
email=x;drop table members;
Think once what happens to ur database.
| Is This Answer Correct ? | 8 Yes | 0 No |
Post New Answer View All Answers
What is a sql join?
What is set nocount on and what is set nocount off?
What is sql sandbox in sql server?
Explain what is the function of sql server agent windows service?
What is the difference between Triggers and Stored Procedure?
Do comments need to go in a special place in sql server 2005?
What triggers long term care?
How do I setup a sql server database?
Define ACID properties in a Database?
What do you mean by an execution plan? Why is it used? How would you view it?
what happens on checkpoint? : Sql server database administration
What is 3nf normalization?
you notice that the transaction log on one of your databases is over 4gb the size of the data file is 2mb what could cause this situation, and how can you fix it? : Sql server administration
How do you manipulate data?
How to Sync Two SQL Azure Databases?