sql injection

What is SQL Injection?

• SQL Injection is a technique where a user or attacker input his SQL Command to the SQL Queries via web page form.

• Structured Query Language

sql injection use to attack website

• True

• False

SQL Injection Example

• SQL Injection: SELECT * FROM userdetails WHERE username = " OR 1"

• "SELECT * FROM userdetails WHERE username = '$name'";

sql injection allows hacking to display all data from databases

• True

• False

A ٍSql injection is entered through the input of the program

• True

• False