All the latest UK technology news, reviews and analysis

Be the SQL master

by Tom Sanders

28 Aug 2007

Be the first to comment

  • Tweet this

If you've ever tried changing the URL of a web page to gain access to information, you are familiar with the concept behind SQL attacks.

Just like changing the URL instructs the web server to present the page, you can send instruction to a database by entering certain characters in fields inside a web page. Ultimately this can lead to the disclosure of confidential information.

If that still sounds to vague to you, have a look at this week's episode of our video blog, where we'll demonstrate SQL attacks.

Previous episodes:
How to lose your password online
Using JavaScript to steal confidential information
Attacking online applications for profit
(cross site scripting attacks)
Why botnet herders love adware

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

31%

2%

14%

53%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Riso

Colour printing: why the bill keeps outstripping the budget

The wrong printers, for the wrong tasks on the wrong contracts

Qlikview

Magic quadrant for business intelligence platforms

Who leads the BI pack and who should we be watching out for?

Functional Oracle Support Analyst

Functional Oracle Support Analyst - EBS Financials, Support...

Oracle E-Business Suite Technical Consultant

Oracle E-Business Suite Technical Consultant - EBS...

Oracle Applications DBA

Oracle Applications DBA - East London - All salaries...

Oracle Functional Consultants

Oracle Functional Consultants - Financial - Project Accounting...

To send to more than one email address, simply separate each address with a comma.