Sql Injection

Question

Hi What Is Meant By Sql Injection???How can we Check Whether Our Application has that Problem or Not??and In Which cases that Problem Occurs??

Shankar M · Answer

Hi Sathish What I know about SQL Injection is that attackers may intrude to our code and Always it is recommended that we need to Pass the values as Parameters to the SQL Query and Stored Procedure to avoid it. Thanks Shankar M

Satyapriya Nayak · Answer

http://haxseeker.blogspot.in/2013/01/sql-injection-manual-tutorial-step-by.html http://msdn.microsoft.com/en-us/library/ms161953%28v=sql.105%29.aspx http://www.codeproject.com/Articles/11020/SQL-injection-attacks http://www.codeproject.com/Articles/9378/SQL-Injection-Attacks-and-Some-Tips-on-How-to-Prev

Jignesh Trivedi · Answer

hi SQL injection is nothing but an attack in which malicious code is inserted into string atat are later passed to the SQL Server instance. Please refer http://www.acunetix.com/websitesecurity/sql-injection/ http://www.veracode.com/security/sql-injection hope this will help you.