Question

Passing structured query language commands to a web application and getting the website to execute it is called SQL script:______.

A) Injection.
B) Processing.
C) Attacking.
D) Execution.

Answer 1

(A) Injection

Step-by-step explanation:

SQL injection is one of the most common web attacks used by attackers to steal data or compromise a web application (especially the database) by inserting or "injecting" SQL queries or commands through the input data from the web application.

In web applications, form inputs are used to make requests to the database either for validation or submission of data by executing queries in the database. If these queries are interfered with by passing query like commands into the form input fields rather than some regular alphanumeric characters, then we have an SQL injection.

When this happens;

i. the attackers can modify an SQL query to return additional results from the database

ii. the attackers can change a query to interfere with the application's regular logic flow.

iii. the attackers can extract sensitive information about the database such as its version and structure.