CompTIA Security+ SQLi (SQL Injection) Attack examples

 SQLi (SQL Injection) Attack

SQL Injection Attack

 SQLi

SQLi (SQL Injection)

·         Server-side attack

·         A query formatted: ‘ or ‘1’=’1’ -- is a SQL injection attack.

·         SELECT * FROM

·         Prevented by

o   Input validation

o   Removing semi-colons, dashes, quotations, & commas

o   Stored procedures