onlinepadhai.com

What is SQl injection ?

Thu, 15 Jul 2010 13:56:00 +0000

An attack technique used to exploit web sites by altering backend SQL statements through manipulating application input.”
- Web Application Security Consortium Glossary.

SQL Injection happens when a developer accepts user input that is directly placed into a SQL Statement and doesn’t properly filter out dangerous characters. This can allow an attacker to not only steal data from your database, but also modify and delete it. Certain SQL Servers such as Microsoft SQL Server contain Stored and Extended Procedures (database server functions). If an attacker can obtain access to these Procedures it may be possible to compromise the entire machine. Attackers commonly insert single qoutes into a URL’s query string, or into a forms input field to test for SQL Injection. If an attacker receives an error message like the one below there is a good chance that the application is vulnerable to SQL Injection.

Microsoft OLE DB Provider for ODBC Drivers error ’80040e14′
[Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near the
keyword ‘or’.
/wasc.asp, line 69

Which command displays the SQL command in the SQL buffer, and then executes it?

Sun, 13 Dec 2009 11:06:37 +0000

RUN

nolock? What is the difference between the REPEATABLE READ and SERIALIZE isolation levels?

Sun, 13 Dec 2009 09:51:03 +0000

Locking Hints – A range of table-level locking hints can be specified using the SELECT, INSERT, UPDATE, and DELETE statements to direct Microsoft® SQL Server 2000 to the type of locks to be used. Table-level locking hints can be used when a finer control of the types of locks acquired on an object is required. These locking hints override the current transaction isolation level for the session.

What is Servlet interface?

Sun, 13 Dec 2009 09:44:07 +0000

The central abstraction in the Servlet API is the Servlet interface. All servlets implement this interface, either directly or , more commonly by extending a class that implements it.

Can we have shared events ?

Sun, 13 Dec 2009 09:35:00 +0000

Yes, you can have shared event’s note only shared methods can raise shared events.

What is the software you have used for project management?

Sun, 13 Dec 2009 08:59:17 +0000

Many companies have there own software defined. There are many project management software available at this moment in market but this can vary from company to company, worst it can very from project to project. But Microsoft project is the most used software at this moment.So just brush your skills on Microsoft project , its used heavily across industry.

Is XML case sensitive?

Sun, 13 Dec 2009 08:46:14 +0000

Yes, they are case sensitive.

How do I find out the number of parameters passed into function9. ?

Sun, 13 Dec 2009 08:44:33 +0000

func_num_args() function returns the number of parameters passed in.

How can we register the variables into a session?

Sun, 13 Dec 2009 08:43:23 +0000

We can use the session_register ($ur_session_var) function.

What are static variables?

Fri, 11 Dec 2009 10:55:16 +0000

Variables that have only one copy per class are known as static variables. They are not attached to a particular instance of a class but rather belong to a class as a whole. They are declared by using the static keyword as a modifier.

               static type  varIdentifier;

where, the name of the variable is varIdentifier and its data type is specified by type.
Note: Static variables that are not explicitly initialized in the code are automatically initialized with a default value. The default value depends on the data type of the variables.