OWASP Top 10 (opens in a new tab)
The official reference for the tools used in this lesson.
Link
SQL injection
Injection happens when data becomes part of the query. Parameterised queries keep the two separate, and they are not optional.
Lesson 2.24m 14sIntermediate10.5k students
Lesson length
4:14What this lesson covers
- See how concatenated input changes a query
- Use parameterised queries everywhere
- Limit database privileges to contain the damage
This lesson sits in Common Web Vulnerabilities, part of Practical Web Security. It assumes what came before it and leads directly into the next lesson in the module.
In this lesson you will
- See how concatenated input changes a query
- Use parameterised queries everywhere
- Limit database privileges to contain the damage
Resources
Personal notes are coming soon.