![\"Sql_Injection_Login\"](\"https:\/\/www.highedwebtech.com\/wp-content\/uploads\/2016\/06\/Sql_Injection_Login.png\")
SQL injection is one of the most typical ways web applications and online platforms can be compromised.\u00a0It doesn’t matter the language either – badly formatted, non-filtered code is easy to write in PHP, ASP.net, and so on.<\/p>\nSQL injection is one of the most typical ways web applications and online platforms can be compromised.\u00a0It doesn’t matter the language either – badly formatted, non-filtered code is easy to write in PHP, ASP.net, and so on.<\/p>\n
SQL injection is a way for an attacker to gain access to your database by sending malformed queries through a web form or service that gets data from a database. Since most web applications talk to database, it’s not hard to find a website that has some sort of connectivity and thus is ripe for attack. Once an attacker finds a vulnerable form, it can be exploited to not only return sensitive information, but also offer a way for the attacker to gain access to the system to perhaps upload a file they can then access via a browser to own\u00a0your machine.<\/p>\n
As you can see in the video below, it’s very easy for attackers to visit your site, app, or platform and try to exploit your data. If you’ve never seen how this type of attack works, or just how easy it is to write code that’s insecure, have a watch:<\/p>\n