14
of 31
SQL Injections
u
Basic premise:
Ø
Sometimes queries executed by an application are
dynamically built using pieces of user-supplied
information
u
Example:
Ø
A web page that allows you to search by some set of
criteria.
