SQL Injection Presentation

SQL Injection Presentation

What is SQL Injection?

SQL Injection is a code injection that could potentially destroy your database.It is a common technique used by hackers in web hacking. It allows an attacker to alter and interfere with any queries that an application makes to its database. These attackers take advantage of any vulnerabilities that a webpage may have.

What happens during SQL Injection?

Thirdly, the hacker is granted access to view and alter records or potentially act as database administrator,

Firstly, the hacker identifies a vulnerable SQL-driven website & injects malicious SQL query via input dataSecondly, malicious SQL query is validated and the command is executed by the databaseSeS

How to prevent SQL Injections

You can prevent SQL Injections via input validation and parametrized queries including prepared statements.

You can also prevent SQL Injections by using character escaping