Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 150028

SQL injection is a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.

1 vote

The login page I'm testing lets me in as long as the username starts with the right name. Ho...

It's not possible to know the precise SQL query without seeing the code, but the following is plausible, but a stretch: SQL select * from users where username='{0}' and password='{1}' Server-side …
Kind Contributor's user avatar
2 votes

How can I build a simple website that contains SQL injection vulnerabilities?

There's an app for that. See https://owasp.org/www-project-juice-shop/ It's a project designed to break all the rules, so you can study it. You can try and find all the problems, not only sql-injectio …
Kind Contributor's user avatar
0 votes
Accepted

Is it plausible to enforce authorisation on SQL generated from "Client-side"?

Is it plausible to enforce authorisation on SQL generated from “Client-side”? Yes. (This is Direct web-interface into RDBMS mentioned in the OP.) Impersonate the user directly on the destination rel …
Kind Contributor's user avatar
0 votes

Is it plausible to enforce authorisation on SQL generated from "Client-side"?

Maybe. (At least for now, this answer is to lead others to provide something I may not have considered/seen yet). Scenario An attacker enters something like select passwordHash from Users where ID …
Kind Contributor's user avatar
3 votes
3 answers
294 views

Is it plausible to enforce authorisation on SQL generated from "Client-side"?

Background We know that SQL Injection (OWASP Top 10) is the most prevalent security vulnerability on websites today. The strategies for mitigating the risk are well known. But are these only reinforc …
Kind Contributor's user avatar
2 votes

Are injection vulnerabilities a design or an implementation flaw?

Given a competent software architect, I would say the biggest issue tends to be implementation, and more specifically individuals that lack knowledge and training about secure coding best practice. …
Kind Contributor's user avatar