SQL INJECTION ATTACK
 
  What is SQL injection ?        A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. SQL injection attacks are a type of injection attack, in which SQL commands are injected into data-plane input in order to effect the execution of predefined SQL commands.     DESCRIPTION:     SQL injection errors occur when:    Data enters a program from an untrusted source.  The data used to dynamically construct a SQL query.     The main consequences are:      Confidentiality:  Since SQL databases generally hold sensitive data, loss of confidentiality is a frequent problem with SQL Injection...
 
 
 
 
