What is SQL injection?

Injection of the structured language of queries (SQL) is a type of attack that almost always attempts to against a web that is controlled by a database. It is an aim to insert malicious code into SQL questions on the web to interfere with data management by destruction, change or detect data stored in the database tables that control the web. SQL is a standard programming language used to create, update and load data that are stored in the databases. Sensitive information such as credit card numbers, person's medical records, usernames and passwords for accounts such as online banking and e -mail, as well as different types of identification numbers can be exposed to cyber criminals. Although data theft is probably the main goal of anyone trying to use SQL injection, it is not the only motivation for using this or any type of code injection technique, such as crippling. Visitors to the website showing information they don't like, they could try to attack SQL injections,To deactivate, stole data or change data to destroy people's mission behind the site.

Sometimes he will try to attack the SQL injection against the website who could have his account banned to the site owner depending on the popularity of the site or trying to destroy the online business of someone he considers to be the enemy. Of course, SQL knowledge is necessary to start an attack of SQL injection, but generally does not consider itself a very difficult language that learns, compared to other programming languages ​​and much can only be achieved using a basic but solid understanding of how to use it. This means that there are a large number of people who have a surfjuernet that has the necessary skill to try to injure SQL against the web.

Website developers, especially those who specialize in the development of the back-end website, are responsible for ensuring that websites that program, JSOU secured against SQL injection. Almost always there is more than one way to achieve such important security, and most of these methods are considered a simple but very effective solution. For example, a developer can use MySQL_REal_escape_string () when scripting in Hypertext Preprocessor (PHP). Methods selected to protect against attack should be carefully considered, as the performance of the site as a whole cannot be ignored even when setting security.