what is sql injection?

Ashok

10y1.1k

what is sql injection

and when we are use it?

7 Replies

Know the answer? Post it — somebody with the same question will find it here.

Jisny Av10y ago
Hi,
SQL injection is a code injection technique, used to attack data-driven applications, in which nefarious SQLstatements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).
Please go through below link
http://www.w3schools.com/sql/sql_injection.asp
Suthish Nair10y ago
We do have some nice articles on this topic.. refer...

http://www.c-sharpcorner.com/forums/suggestions/sql-injection-cartoon

http://www.c-sharpcorner.com/forums/suggestions/what-is-sql-injection3

http://www.c-sharpcorner.com/Forums/sql-injection-cartoon
Bikesh Srivastava10y ago
Hi Ashok,
In order to run malicious SQL queries against a database server, an attacker must first find an input within the web application that is included inside of an SQL query. In order for an SQL injection attack to take place, the vulnerable website needs to directly include user input within an SQL statement.
--MySQL,MSSQL,Oracle,PostgreSQL,SQLite
'OR'1'='1'--
'OR'1'='1'/*
--MySQL
'OR'1'='1'#
--Access(usingnullcharacters)
'OR'1'='1'%00
'OR'1'='1'%16
For more details visit this link.
http://www.acunetix.com/websitesecurity/sql-injection/
Nigel Fernandes10y ago
sql injection is an attack on a website/application
it occurs when not using parameterised queries and not validating user input.
The only time you need to you use it , is when testing your own application or website.
Krishna Rajput Singh10y ago
Hi below links helpful for you......
SQL injection is a code injection technique, used to attack data-driven applications, in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).
http://searchsoftwarequality.techtarget.com/definition/SQL-injection
http://www.w3schools.com/sql/sql_injection.asp
Rajeesh Menoth10y ago
Hi,
SQL injection is a technique where malicious users can inject SQL commands into an SQL statement, via web page input. Injected SQL commands can alter SQL statement and compromise the security of a web application.
Reference :
http://www.w3schools.com/sql/sql_injection.asp
Ravi Patel10y ago
Hi ,
refer this
http://www.c-sharpcorner.com/UploadFile/0926bc/sql-injection/