Chapter 5, Problem 4GDQ

Explanation of Solution

SQL Injection attack:

It is a popular method of stealing the data because it can be done from anywhere in the world.

It is a criminal attack on an information system, which illegally extracts data from the database. There is no need to enter into the target place of the injection attack. It only needs the availability of smart people spend some time and one or more modest computer.

The attacker can add or delete data, drop tables and their data even they can shut down the information system.

The attacker can do any types of threat in the database through SQL injection...