2.2.5. SQL Injection

Try these first

1. 1.

   What is SQL Injection?

   Hint

   Think about how attackers manipulate SQL commands.

2. 2.

   Give one example of a SQL Injection string.

   Hint

   Consider what's commonly used to bypass logins.

3. 3.

   What does SQL stand for?

   • Structured Query Language
   • Simple Quick Language
   • Sensible Query Language

   Hint

   Consider what SQL is used for.

4. 4.

   SQL Injection attacks can only occur on poorly coded applications. True or False?

   Hint

   Think about the security practices.

5. 5.

   Design an application with inputs and outline at least three SQL Injection scenarios with their potential impact.

   Hint

   Consider common functionalities in applications.

6. 6.

   Develop a best practices guide to secure an application against SQL Injection.

   Hint

   Focus on prevention and user input handling.