sql injection

Arnav Katyal answered on May 25, 2022 Popularity 10/10 Helpfulness 4/10

answer sql injection

related sql injection

sql injection

Comment

Username: "admin'-- "
Password: "whatever"
------------------------------
Server Command: SELECT * FROM `users` WHERE username = 'admin'-- ' AND password="whatever"

Popularity 10/10 Helpfulness 4/10 Language sql

Source: Grepper

Tags: sql sql-injection

Link to this answer
Share Copy Link

Contributed on Jan 31 2023

Arnav Katyal

0 Answers Avg Quality 2/10

Closely Related Answers

sql injection

Comments(1)

imagine if there is an input line on website where you type a name of some dish
to find it , then it will look something like this:
--------------------------------------------------------------------------------
Your regular input: 
	"Salad" => InputString = "Salad"
query on serever: 
	select * from menu where dish_name = InputString
    					or
    select * from menu where dish_name = 'Salad'
--------------------------------------------------------------------------------
Your injection try:
	"Salad'; drop table menu --" => InputString = "Salad'; drop table menu --"
query on serever: 
	select * from menu where dish_name = InputString
    					or
    select * from menu where dish_name = 'Salad'; drop table menu --'
--------------------------------------------------------------------------------
what we are doing is using "Salad';" in input to be able to create new query
after that line , then adding "drop table menu" query or something else if you 
want and in the end "--" part to comment the rest (in our case the apostrophe) 
so we dont get syntax exeption. thats how we dropped menu table

P.S.check out drop database car meme

Popularity 10/10 Helpfulness 4/10 Language sql

Source: Grepper

Tags: sql

Link to this answer
Share Copy Link

Contributed on May 25 2022

Powerful Panda

0 Answers Avg Quality 2/10

sql injection

Comment

In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution.

Popularity 10/10 Helpfulness 2/10 Language sql

Source: Grepper

Tags: sql

Link to this answer
Share Copy Link

Contributed on Oct 26 2023

Magnificent Moose

0 Answers Avg Quality 2/10

sql injection

Contents

More Related Answers

sql injection

Closely Related Answers

sql injection

sql injection

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.