Welcome back to this lecture we will discuss school injection now.
Before going to start let's talk about what is better.
Why are we securing data from the database.
Data is one of the most important components of information systems database for wide web applications
used by the Malaysian to get data from customers.
Yes Google is the acronym for structured query language.
It is used to retrieve and manipulate data in the database.
Now you can get some information about database.
A database is an organized collection of data stored and accessed electronically.
Let's look at Eskew.
Yes curin is a domain specific language used in the programming and design for managing data held in
a relational database management system.
Our first pre-processing in Lensmen data stream management system now question arise is what is this
tool injection.
Fuel injection is an attack that poisons dynamic Eskil statements to comment out certain parts of statement
or appending a condition that will always be true.
It takes advantage of the design flaws in poorly designed web applications to exploit squill statements
to execute malicious Asgill code.
Let's look at how a school injection works.
Asom that here is one attacker and this girl will never sight the types of attacker that can be performed
using Gaskill injection.
Depending on the type of the database engine the attack works on a dynamic statement is a statement
that is generated at runtime using parameters password from a platform.
You are I way string has him that this.
As to the ABC Darco question mark ID equals true ID parameter has its Cuil vulnerability first attackers
finds one level pages with different payloads.
Once he finds the one nobody modify delete data whatever he want.
Nowadays there are so many tools available for expedition's
can access blood manually by using union statements and so on OK that's it in this with lecture.
Thank you for watching.
See you in next lecture.