What is SQL Injection


SQL Injection

Vulnerable computer systems and applications:

Web pages, network applications.

Description:

SQL Injection is a common way to take over web pages and programs that work with databases. The override is based on inserting a specific SQL code into the query. Such a query, depending on the database management system and other things, may allow to:

  • Read the contents of the tables;
  • Remove, change, and add data to a table;
  • Read (write) files on the server that is being attacked;
  • Execute commands on the attacked server.

 

Recommendations:

  • Ensure high quality programming of information systems;
  • Filter SQL query strings and numbers.