SQL Injection 2.3

Question 1

Code Injection Attacks

Answer 1

• Adding your own information into a data stream.
• Enabled because of bad programming.

Question 2

Types Code Injection

Answer 2

• HTML
• SQL
• XML
• LDAP

Question 3

SQL Injection Attack

Answer 3

• A form of code injection aimed at any SQL-based database, regardless of vendor.
• Put your own SQL requests into an existing application.
• Can be executed through the browser.

Question 4

Example of SQL Injection

Answer 4

• A function takes the user-provided inputs for username and password.
• Substitutes them in a WHERE clause of a SQL statement.
• The WHERE clause changes to be inoperable and returns all stored data.