SQL Server MCQs - CSE MCQs Questions and Answers

Home / CSE MCQs / SQL Server MCQs :: Discussion

Which of the following script is example of SQL injection attack ?

var Shipcity;

ShipCity = Request.form ("ShipCity");

var SQL = "select * from OrdersTable where ShipCity = '" + ShipCity + "'";

var Shipcity;

ShipCity = Request.form ("ShipCity");

var Shipcity;

var SQL = "select * from OrdersTable where ShipCity = '" + ShipCity + "'";

All of the mentioned

Answer : Option A

Explanation :

The script builds an SQL query by concatenating hard-coded strings together with a string entered by the user.

Be The First To Comment

Comments

Name