SQL Server Interview Questions and Answers
<< Previous Question Next Question >>
 Question: 1745 Page Views: 

What is SQL injection attack?



Posted By: Avi Date: 2 October 2009 07:12:03 AM
 Answer:

SQL injection is an attack in which malicious code is inserted into strings that are later passed to an instance of SQL Server for parsing and execution.

The injection process works by prematurely terminating a text string and appending a new command. Because the inserted command may have additional strings appended to it before it is executed, the malefactor terminates the injected string with a comment mark "--". Subsequent text is ignored at execution time.


Posted By: eTechPlanet


Date: 2 October 2009 07:12:03 AM
Post a better Answer if you have
 
(Will show your Gravatar icon)  
  Country flag

Loading
Enter the text as shown in the image NZUpkX
Related Questions
SQL Server : Having the following table:- 
sno          val1
1              7.5
2              8
3              9.5
4              11
.
.
.
N              val
Write the code to update the table where the difference in the column "val1" is computed i.e. (val1[2]-val1[1

Having the following table:- sno val1 1 7.5 2 8 3 9....

Code Required is:- update cal set diff_val = 0 where ID = (select min(sno) from cal) Update cal ....
Category: SQL Server Date: 10/1/2010 11:16:07 AM
SQL Server : Differentiate between Function and Stored Procedure?

Differentiate between Function and Stored Procedure?

1. Function returns a value but it is not necessary that stored procedure return a value. 2. Functio....
Category: SQL Server Date: 10/1/2010 11:15:07 AM
SQL Server : What is the purpose of the locks in SQL Server?

What is the purpose of the locks in SQL Server?

Category: SQL Server Date: 10/1/2010 11:12:07 AM
SQL Server : Usually clustered and non-clustered indexes are discussed. It can be further configured into three categories. Which are those?

Usually clustered and non-clustered indexes are discussed. It can be further configured into three c....

The three ways other than clustered and non-clustered it can be configured into Composite Index and ....
Category: SQL Server Date: 10/1/2010 11:11:07 AM
SQL Server : There are several advantages of creating and index , but can you state some drawbacks of creating an index?

There are several advantages of creating and index , but can you state some drawbacks of creating an....

There are major two drawbacks of using indexes. 1.First one is the disk space. Index uses much spac....
Category: SQL Server Date: 10/1/2010 11:10:07 AM