Question: Consider the following SQL statement: I. ii. SELECT name, email FROM users WHERE id=5; IF SYSTEM_USER='sa' SELECT 1/0 What is the statement trying to
Consider the following SQL statement: I. ii. SELECT name, email FROM users WHERE id=5; IF SYSTEM_USER='sa' SELECT 1/0 What is the statement trying to do within the database? Consider that sa stands for system administrator. How can the system administrator protect against such a threat?
Step by Step Solution
3.41 Rating (164 Votes )
There are 3 Steps involved in it
Solution The SQL statement youve provided seems to have a potential SQL injection vulnerability and it includes a conditional statement that checks if ... View full answer
Get step-by-step solutions from verified subject matter experts
