What is Sql Injection in Sql?

Question

Hello friends I want to know about Sql injection in Sql.

Jignesh Trivedi · Answer

hi SQL injection is an attack in which malicious code is inserted into strings that are later passed to an instance of SQL Server for parsing and execution. please refer http://msdn.microsoft.com/en-us/library/ms161953%28v=sql.105%29.aspx http://www.codeproject.com/Articles/9378/SQL-Injection-Attacks-and-Some-Tips-on-How-to-Prev http://sqlzoo.net/hack/ hope this will help you.

Nattudurai Eswaramurthy · Answer

SQL injection is a technique used to take advantage of non-validated input vulnerabilities to pass SQL commands through a Web application for execution by a backend database. Attackers take advantage of the fact that programmers often chain together SQL commands with user-provided parameters and can therefore embed SQL commands inside these parameters. The result is that the attacker can execute arbitrary SQL queries and/or commands on the backend database server through the Web application. PLease go through the following link s: http://www.unixwiz.net/techtips/sql-injection.html http://www.imperva.com/resources/glossary/sql_injection.html