2.1 injection technology Overview

SQL injection attacks are the query strings requested by inserting SQL commands into the Web form input field page to spoof the server to execute malicious SQL commands, obtain the data required by hackers Based on the program's return.

 

Attackers construct special SQL statement queries. Because the server lacks the judgment on the validity of submitted data, the queries are directly placed in the database. When the query sent by the database is normal, the query results are returned, as a result, hackers obtain the required database information. An SQL injection attack is completed in this way.