SQL Injection

[ramsun]

Hi, I want to know about the SQL Injection, Can anyone help me to get some more information about this? Please, help me. I am waiting for your reply.

[Calvin K]

Hi, I don't know more about this SQL Injection in SQL. But have some knowledge such as SQL Injection is mostly used by hacker or professional to harm the information through intellectual technique. Suppose, if you want to write SQL query which will make effect to the database, such as

Delete * From Student;

Then this can be termed as inject in SQL by writing DML in textbox.

[Lillebror]

Hello, Basically Sql injection is used for the purpose of harming the database. It is the process of passing SQL query into an application in such a way which is not specified by the developer of that application, so it is the strategy to attack the database.

Example

SELECT FROM student WHERE username="ramesh" AND
password="psw".

A hacker can enter into the system by using such commands and attack your system.

[jesse]

Hi, Sql Injection can be called as a input manipulation attacks. It can be created with the String concatenation, in which the user can change through entry the result sql statement.

For Example:

select username from login where username = '&txtuser.Text&'

This can be used for the attack on the database.