07-09-2014, 08:39 PM
Today in the era of information people started sharing information on internet. And business firms use WEB-SITES to be popular among the people. As more businesses and organizations provide online services, the number of web sites or applications which are linked to a database has increased greatly. Now some intelligent programmers known as hackers started stealing this information from the web-sites. They use many tools for hacking. And SQL-Injection is one of them. SQL injection, the use of database commands in the SQL language where user input is expected, remains a top threat. SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed.