Skip to main content

Posts

Showing posts with the label how SQL injection works

SQL INJECTION

What is SQL INJECTION SQL INJECTION is getting Unauthorized access to database. After successful authentication by SQL injection attacker tries to harm or dispose or cause any type of harm to a database.   A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.  SQL injection we try to use SQL comments or using logical Boolean relational algebra i.e (OR & AND clause) to get data from db. How to Perform basic SQL injection Make a basic html form page without providing front end validation. Make a Folder in your local host directory as test HTML FORM AS index.html in your localhost directory(var/WWW/html/test) or in ht docs in XAMPP then add this HTML simple form as index.html <!