what is meant by sql injection with example and one more
question how to catch the errors in sqlserver
Answer Posted / sudheer
sql injection attacks are used to steal information from a
database from which normally not be available and /or to
gain access to an organaization 's host computers through
the computer that is hosting the database.
EXAMPLE:
select email,pwd,login_id,fullname from members where
email='x'
Now somebody does not put 'x' as the input but
puts 'x ;drop table members;' so the actual sql wich will
execute is
select email,pwd,login_id,fullname from members where
email=x;drop table members;
Think once what happens to ur database.
| Is This Answer Correct ? | 8 Yes | 0 No |
Post New Answer View All Answers
Define Wed Edition in SQL Azure?
Explain the cursor lock types?
Does order by actually change the order of the data in the tables or does it just change the output?
Disadvantages of the indexes?
What is role playing dimension with two examples? : sql server analysis services, ssas
What is an execution plan?
You have several tables, and they are joined together for querying. The tables contain both clustered indexes and non clustered indexes to optimize performance, how should you distribute the tables and their indexes onto different file groups?
How to create function without parameter in sql server?
What is exclusive locks?
Name three of the features managed by the surface area configuration tool? : sql server security
How to set the current database in ms sql server?
What does man by sql wildcard characters in sql server?
What is the contrast between sql and mysql?
What is an etl file?
What is standby servers? Explain types of standby servers.