SQL Server interview questions: - Show us SQL injection in SQL Server?

By : Shiv Prasad Koirala | Sep 23rd, 2011 | Views : 258 | Comments : 0

This is one of the most favorite SQL Server interview questions asked by the interviewer.

It is basically a Form of attack on a database-driven Web site in which the attacker executes unauthorized SQL commands by taking advantage of insecure code on a system connected to the Internet, bypassing the firewall. SQL injection attacks are used to steal information from a database from which the data would normally not be available and/or to gain access to an organization�s host computers through the computer that is hosting the database.

SQL injection attacks typically are easy to avoid by ensuring that a system has strong input validation.

As name suggest we inject SQL which can be relatively dangerous for the database. Example this is a simple SQL

SELECT email, passwd, login_id, full_nameFROM membersWHERE email = 'x'

Now somebody does not put �x� as the input but puts �x ; DROP TABLE members;�. So the actual SQL which will execute is:-

SELECT email, passwd, login_id, full_nameFROM membersWHERE email = �x�; DROP TABLE members;

Think what will happen to your database.

Also see another SQL server interview questions video on difference between unique key and primary key as follows: -

Get more materials on Sql Server interview questions

Regards,

Also see author�s other blog on SQL server interview questions

Rate this Article :

0 1 1 2 1

Article Tags : SQL , SQL Server Interview Questions

Comments

Write a Comment

All fields marked with * are mandatory

ASP.NET interview questions: - Can you explain Method of Sorting GridViewcontrol in ASP.NET?

Sorting allow you to sort the GridViewcontrol data in Ascending or Descending order.... Read More

By : Shiv Prasad Koirala | Aug 4th, 2011 | ASP.NET

WCF Interview questions:- Which binding do we need to use for WCF REST?

In this article we will show Binding used for WCF REST. For more articles and videos visit us on www.questpond.com... Read More

By : Shiv Prasad Koirala | Nov 16th, 2011 | WCF

.NET interview questions: - Can you elaborate project life cycle?

In this article we will explain about project life cycle. For more articles and videos visit us on http://www.questpond.com/... Read More

By : Shiv Prasad Koirala | Jan 17th, 2012 | .Net

.NET interview questions: - How will you distinguish between ForeGround and BackGround Threading?

threading is a parallel processing unit and helps you to access multiple tasks at a one moment of time.... Read More

By : Shiv Prasad Koirala | Sep 27th, 2011 | ASP.NET

C# interview questions: - Explain anonymous methods in .NET?

n simple words Anonymous Methods means method which are coded inline or methods without method name.... Read More

By : Shiv Prasad Koirala | Aug 5th, 2011 | C#