Hi,
What Is Meant By Sql Injection???How can we Check Whether Our Application has that Problem or Not??and In Which cases that Problem Occurs??
Loading
Know the answer? Post it — somebody with the same question will find it here.
Sign in to answer this question
It is the same account you read, post and publish with — and you will come straight back to this page.
Shankar MPosted May 17, 2013, 6:46 AM
What I know about SQL Injection is that attackers may intrude to our code, and Always it is recommended that we need to Pass the values as Parameters to the SQL Query and Stored Procedure to avoid it.
Thanks, Shankar M
Satyapriya NayakPosted May 13, 2013, 2:07 AM
http://msdn.microsoft.com/en-us/library/ms161953%28v=sql.105%29.aspx
http://www.codeproject.com/Articles/11020/SQL-injection-attacks
http://www.codeproject.com/Articles/9378/SQL-Injection-Attacks-and-Some-Tips-on-How-to-Prev
Jignesh TrivediPosted May 13, 2013, 1:52 AM
hi,
SQL injection is nothing but an attack in which malicious code is inserted into string atat are later passed to the SQL Server instance.
Please refer
http://www.acunetix.com/websitesecurity/sql-injection/
http://www.veracode.com/security/sql-injection
hope this will help you.