Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with sql-injection
Search options not deleted
user 150028
SQL injection is a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.
3
votes
3
answers
294
views
Is it plausible to enforce authorisation on SQL generated from "Client-side"?
Background
We know that SQL Injection (OWASP Top 10) is the most prevalent security vulnerability on websites today. The strategies for mitigating the risk are well known. But are these only reinforc …
- 471
2
votes
How can I build a simple website that contains SQL injection vulnerabilities?
There's an app for that. See https://owasp.org/www-project-juice-shop/
It's a project designed to break all the rules, so you can study it. You can try and find all the problems, not only sql-injectio …
- 471
2
votes
Are injection vulnerabilities a design or an implementation flaw?
Given a competent software architect, I would say the biggest issue tends to be implementation, and more specifically individuals that lack knowledge and training about secure coding best practice.
…
- 471
1
vote
The login page I'm testing lets me in as long as the username starts with the right name. Ho...
It's not possible to know the precise SQL query without seeing the code, but the following is plausible, but a stretch:
SQL
select * from users where username='{0}' and password='{1}'
Server-side …
- 471
0
votes
Accepted
Is it plausible to enforce authorisation on SQL generated from "Client-side"?
Is it plausible to enforce authorisation on SQL generated from
“Client-side”?
Yes. (This is Direct web-interface into RDBMS mentioned in the OP.)
Impersonate the user directly on the destination rel …
- 471
0
votes
Is it plausible to enforce authorisation on SQL generated from "Client-side"?
Maybe. (At least for now, this answer is to lead others to provide something I may not have considered/seen yet).
Scenario
An attacker enters something like select passwordHash from Users where ID …
- 471