What is SQL Injection?

Question

What is SQL Injection?

Answer 1

SQL Injection (SQLi) is an injection attack that allows the execution of malicious SQL statements. These SQL statements control the server of the database. Attackers make use of the vulnerabilities of this SQL Injection in order to bypass the security measures of an application. They can easily authenticate and authorize the web pages and applications to retrieve confidential SQL database information. They can also add, update, and delete data records from the database using SQLi.

The most common types of SQLi attack are as follows:

• Data deletion
• Updating the data
• Data insertion
• Execution of commands on the database server that can lead to installation of Trojan and other malicious programs

If you want to learn more about SQL and SQLi then you must read the SQL Tutorial.

Also, check out this video on SQL: