While there are a number of security risks in the world of electronic commerce, SQL injection is one of the most common Web site attack techniques used to steal customer data such as credit card numbers, hold customer data hostage by encrypting it or destroy data outright. Where a Web server only understands and speaks the HTTP protocol, a database's native tongue is Structured Query Language (SQL), which is essentially a set of command statements that instruct a database to execute specific actions. Every database server has a similar series of commands to query its tables, narrow down results to a few specific entries, and combine information from one table to another. Here is an example SQL query: The WHERE specifies a condition, that an e-mail address and password combination match data present in the "users" table. When...
[read full story]
Your Web Site
