A method of attack where the attacker manipulates the data in HTTP and other network headers that may be stored in a logging database.

$12345678$

A method of attack where the attacker uses the response to a bad query to obtain information about the structure of a database.$$

$12345678$

A method of attack where the attacker puts more than one SQL query into their crafted input.

$12345678$

A method of attack where barcodes and$$RFID tags$$can be used as input to a database.

$1.$

Server variables

$2.$

Physical user input

$3.$

Piggybacked queries

$4.$

Logically incorrect queries

$5.$

Cookies

$6.$

Second$-$order injection

$7.$

end$-$of$-$line comment

$8.$

Blind SQL injection