what is meant by sql injection with example and one more
question how to catch the errors in sqlserver
Answer Posted / sudheer
sql injection attacks are used to steal information from a
database from which normally not be available and /or to
gain access to an organaization 's host computers through
the computer that is hosting the database.
EXAMPLE:
select email,pwd,login_id,fullname from members where
email='x'
Now somebody does not put 'x' as the input but
puts 'x ;drop table members;' so the actual sql wich will
execute is
select email,pwd,login_id,fullname from members where
email=x;drop table members;
Think once what happens to ur database.
| Is This Answer Correct ? | 8 Yes | 0 No |
Post New Answer View All Answers
what is the difference between count(*) and count(1) ?
What is snapshot report?
Explain powershell included in sql server 2008?
What are the underflow and overflow behaviors on float literals?
What is tablesample?
What is resource governor in sql server?
What is bcp? When does it used?
Can you edit the .rdl code associated with a linked report?
What is the use of RDBMS?
What happens when transaction log is full?
What is create command?
Explain differentiate between a having clause and a where clause?
Can sub report data source be different from that of the parent report?
How are the exceptions handled in sql server programming?
What is a file group?