Question: 5.5 Consider the SQL statement: SELECT id, forename, surname FROM authors WHERE forename = 'john' AND surname = 'smith' a. What is this statement intended

5.5 Consider the SQL statement:

SELECT id, forename, surname FROM authors WHERE forename = 'john' AND surname = 'smith'

a. What is this statement intended to do?

b. Assume the forename and surname fields are being gathered from user-supplied input, and suppose the user responds with:

Forename: jo'hn

Surname: smith

What will be the effect?

c. Now suppose the user responds with:

Forename: jo'; drop table authors--

Surname: smith

What will be the effect?

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!