SQL injection

Question

SQL injection

Shivrudra

SSCrazy

Points: 2835
More actions
January 14, 2010 at 10:55 pm

#214602

Hi All,
Please tell me what is means by SQL injection in simple words as i m not clearly understand it by msdn.
Regards,
Shivrudra W

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

Chandra Sekhara Vyas Dhara SSChampion Points: 10207 More actions · Answer 1

SQL injection is an attack in which malicious code is inserted into strings that are later passed to an instance of SQL Server for parsing and execution. Any procedure that constructs SQL statements should be reviewed for injection vulnerabilities because SQL Server will execute all syntactically valid queries that it receives. Even parameterized data can be manipulated by a skilled and determined attacker.