What is SQL Injection
Lots of information about SQL Injection on wikipedia and xkcd has a very good example.
In general, if your application uses a SQL database, a SQL Injection attack is an attempt to use your program to pass dangerous values to the SQL database.
The best preventative measure is to never create SQL rows without cleaning them up - the best way to do this is by using parameterized queries and widely used data access libraries.
a source to share
Start here: google "sql injection" .
You will see that there are many opportunities to read about this.
If you want to protect yourself from sql injection, you need to be more specific as the exact methods differ depending on the database and platform using the database.
a source to share
It is an input manipulation technique to manipulate your sql. More details here are better for you Attacks by example
a source to share
Several places to get started:
- OWASP : A set of principles for building a secure web application. Check the first Top 10 entry on injection
- .NET developer injection . Details on what it is and how to protect against it if you work with .NET.
a source to share
This allows an attacker to manipulate existing data, destroy data or make it otherwise inaccessible and shortly become database server administrators ...
This attack involves injecting SQL commands into the input of a query, which results in pre-defined SQL commands being emitted.
a source to share