Tuesday, September 25, 2007

SQL injection - all you need is a syringe

SQL injection is the art of modifying possible queries accepted by database programs employed in security settings either for a website or a network.
Instead of talking about it in length it would be better to show you the way to another blog which talks about it in great detail.

FR3DC3RV Online Security Blog

Wikipedia article tells some basic techniques:

http://en.wikipedia.org/wiki/SQL_injection

An article on an indian website with the SQL injection flaw:
(www.incredibleindia.org) discovered by susam pal

#references : en.wikipedia.org

No comments: