Question
What is sql injection?
Answers
An SQL injection attack "injects" or manipulates SQL code by adding unexpected SQL to a query. Many web pages take parameters from web user, and make SQL query to the database. Take for instance when a user login, web page that user name and password and make SQL query to the database to check if a user has valid name and password.

Username: ' or 1=1 ---Password: [Empty]
This would execute the following query against the users table:

select count(*) from users where userName='' or 1=1 --' and userPass=''   Your Comment




  • Contributors: *,
More Software Questions..
What is the inputsplit in map reduce software?
What is software configuration management?
What Is Java Api For Xml-based Rpc (jax-rpc)?
How can you implement fine-grained auditing?
What is IBM’s simple explanation for Big Data’s four critical features?
What is static synchronized method in JDBC API? Give an example?
What does the NULLIF function do?
What happens if a start method is not invoked and the run method is directly invoked?
Should we override finalize method
what is the difference between mysql_fetch_array and mysql_fetch_object?
How will XML affect my document links?
Why to use Style Sheets?
What are Filters in MVC?
Can you explain Application layer in OSI model?
How to define new testplan attributes?
What are the minimum system requirements to run Photoshop? Is it possible to run Photoshop over linux?
Which oracle package is used to manage the oracle lock management services?
What is Latch Up? Explain Latch Up with cross section of a CMOS Inverter. How do you avoid Latch Up?
What is marker interface?
What types of partitioning are there for BW?


Search
Can you Answer!!
  • Q How did Krishna come to be called Ranchod (the one who shunned the battle)?
  • Q What is parallel
  • Q Is that possible to change process or shared variable during runtime?
  • Q Standard & Poor’s was founded in
  • Q What is DNA polymorphism?
  • Q In reviewing the IS short-range (tactical) plan, the IS auditor should determine whether: A. there is an integration of IS and business staffs within projects. B. there is a clear definition of the IS mission and vision. C. there is a strategic information technology planning methodology in place. D. the plan correlates business objectives to IS goals and objectives.
  • Q Give me an example of a business decision you made that you ultimately regretted. What happened?
  • Q What if the project isn't big enough to justify extensive testing?
  • Q How many financial upgradation can be granted under MACP Scheme?
  • Q Enlist the various transaction phases?
  • Q What are dietary antioxidants?