Question: Consider an SQL statement: SELECT id , forename, surname FROM authors WHERE forename john AND surname smith What is this statement intended to do ?

Consider an SQL statement:
SELECT id, forename, surname FROM authors WHERE forename john AND surname smith
What is this statement intended to do?
Assume the forename and surname fields are being gathered from user-supplied input, and suppose the user responds with:
Forename: john
Surname: smith
What will be the effect?
Now suppose the user responds with:
Forename: jo; drop table authors--
Surname: smith
What will be the effect?
Can you explain the answer in more simple terms please.
Consider an SQL statement: SELECT id , forename,

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!