Thursday, December 2, 2010

SQL injection

SQL injection is a technique to maliciously exploit applications that use client-supplied data in SQL statements. Attackers trick the SQL engine into executing unintended commands by supplying specially crafted string input, thereby gaining unauthorized access to a database in order to view or manipulate restricted data.

SQL injection techniques may differ, but they all exploit a single vulnerability in the application


I would like you can shoot below link to know SQL Injection with some example.this is educational purpose.

http://st-curriculum.oracle.com/tutorial/SQLInjection/index.htm