How SQL Injection works in database server ?

Question

How SQL Injection works in databaseserver ?

Rajkiran Swain · Answer

SQL injection is an idea that malicious users can inject SQL command into SQL Query from the input control of the page. SQL injection allows attacker with unauthorized access to delete / change sensitive data, modify SQL server settings, etc. SQL injection is direct insertion of code into the input variables that are used with SQL query To run malicious SQL queries on database server, the attacker first finds the input control that value is part of SQL query and at this point he/she introduced malicious SQL queries to break existing functionality of application. Example Suppose I have an Employee Table and it has some dummy data. To retrieve a particular employee record, I have written stored procedure, which except for name and based on username, will return employee data. http://www.c-sharpcorner.com/article/sql-injection-in-dynamic-sql/

Edward paul · Answer

Thanks for sharing such an informative post. It is really very helpful.

Krishna Rajput Singh · Answer

HI tapan thank you for writing below answer helpful for you if helpful mark as correct answer. SQL Injection is "a code injection technique that exploits a security vulnerability occurring in the database layer of an application". In other words it's SQL code injected in as user input inside a query. SQL Injections can manipulate data (delete, update, add ecc...) and corrupt or delete tables of the database An SQL injection is a computer attack in which malicious code is embedded in a poorly-designed application and then passed to the backend database. The malicious data then produces database query results or actions that should never have been executed.

Manikandan Murugesan · Answer

SQL Injection is a code injection technique, used to attack data-driven applications, in which nefarious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). An SQL injection is a maliciously formed SQL query used to "confuse" an SQL database into giving something it shouldn't. For instance, consider the following query "SELECT * FROM `users` WHERE `username` = '$name'" ; In a normal case, this will work. If we submit 'Jack' to this, it will return all users named Jack. However, if a user enters, say "' OR 1=1", the resulting query would be "SELECT * FROM `users` WHERE `username` = '' OR 1=1" ; Since 1 always equals 1, and the combinating clause is OR, this will return true on every row, which will in turn display EVERY row to the malicious user. Using this technique, someone can view your entire database. Also consider if someone submits something like "'; DROP TABLE users ";--, which results in "SELECT * FROM `users` WHERE `username` = ''; DROP TABLE `users`" ;-- "; Which is two queries, one which will do nothing, the second which will delete the ENTIRE users database, resulting in the loss of your data. The best method to prevent SQL injections is to use prepared statements. With these, you send a query to the SQL database that says something like "SELECT * FROM `users` WHERE `username` = '?'" ; This lets the database know the format of the query (WHERE username equals some value), so there is no confusion when given a plain text query. Then the database knows to expect one value, and where to put it. Then you pass that value to the database which it can use to search. This is also better as the database can optimize the query for faster searching.