Cards (3)

  • What is an SQL injection
    • Networks which make use of databases are vulnerable to SQL injection attacks 
    • SQL stands for Structured Query Language - it’s one of the main coding languages used to access information in databases 
    • SQL injections are pieces of SQL typed into a website’s input box which then reveal sensitive information 
    • SQL Injections give criminals easy access to insecure data
  • How an SQL Injection works on a website
    • A website may allow you to view your account information as long as you enter your password into an input box 
    • If the website’s SQL code does not have a strong enough input validation , than someone may be able to enter a piece of SQL code which allows them to access other people’s account information as well as their own
  • How an SQL Injection might play out
    Remember : If the SQL code is insecure, hackers can use this as an easy way to get past a website's firewall