SQL Injection

[sreehari]

A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.
SQL Injection is very common with PHP and ASP applications due to the prevalence of older functional interfaces. Due to the nature of programmatic interfaces available, Java EE and ASP.NET applications are less likely to have easily exploited SQL injections.
Common SQL injection attacks can see

[jay]

Thanks Sreehari for the tutorial post. It's very detailed with step by step examples on situations where sql injections happens and how to tackle it. A must read for programmers. !

Read more about it - http://www.learnphponline.com/security/ ... -mysql-php