what is sql injection?

Question

what is sql injection and when we are use it?

Krishna Rajput Singh · Answer

Hi below links helpful for you...... SQL injection is a code injection technique used to attack data-driven applications in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). http://searchsoftwarequality.techtarget.com/definition/SQL-injection http://www.w3schools.com/sql/sql_injection.asp

Suthish Nair · Answer

We do have some nice articles on this topic.. refer... http://www.c-sharpcorner.com/forums/suggestions/sql-injection-cartoon http://www.c-sharpcorner.com/forums/suggestions/what-is-sql-injection3 http://www.c-sharpcorner.com/Forums/sql-injection-cartoon

Nigel Fernandes · Answer

sql injection is an attack on a website/application it occurs when not using parameterised queries and not validating user input. The only time you need to you use it  is when testing your own application or website.

Rajeesh Menoth · Answer

Hi SQL injection is a technique where malicious users can inject SQL commands into an SQL statement via web page input. Injected SQL commands can alter SQL statement and compromise the security of a web application. Reference : http://www.w3schools.com/sql/sql_injection.asp

Ravi Patel · Answer

Hi  refer this http://www.c-sharpcorner.com/UploadFile/0926bc/sql-injection/

Jisny Av · Answer

Hi SQL injection is a code injection technique used to attack data-driven applications in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). Please go through below link http://www.w3schools.com/sql/sql_injection.asp

Bikesh Srivastava · Answer

Hi Ashok In order to run malicious SQL queries against a database server  an attacker must first find an input within the web application that is included inside of an SQL query. In order for an SQL injection attack to take place the vulnerable website needs to directly include user input within an SQL statement. --MySQLMSSQLOraclePostgreSQLSQLite 'OR' 1 '=' 1' -- 'OR' 1 '=' 1'/* --MySQL 'OR' 1 '=' 1'# --Access(usingnullcharacters) 'OR' 1 '=' 1'%00 'OR' 1 '=' 1'%16 For more details visit this link. http://www.acunetix.com/websitesecurity/sql-injection/