Database Security
SQL Injection Attacks and Database Security Introduction Most websites, other than very simple ones, use databases that are used to store data, so they store user names, passwords, news articles, blog posts, pictures, etc. Anything that happens on the website is stored on a database and the web application queries the database and then displays the data to you or the users, on screen. When the user does something, it will either update, delete, or modify the database's data. This interaction, between the web application and the database, happens mainly using a language called SQL. SQL injection is an attack technique or a vulnerability that occurs in the database of an application where the attacker can exploit the vulnerable code, input that the application takes from users and any parameter influencing the database query and alter the query which further can be used to retrieve sensitive data, changing the original data, deleting the data and even gain...