Applied Network Security

How SQL injections work

To conduct any SQL injection, we must first find an entry point in the website or web application where we can input a query like the following:

Use the following pseudo code to see how this works on the backend:

#Define Post 
name = request.POST['username'] 
pwd = request.POST['password'] 

# Vulnerable SQL Query 
sql = "SELECT id FROM clients WHERE username='" + name + "' AND password='" + pwd + "'" 

# Execute the statement 
database.execute(sql)

This is a simple script for authenticating users against a table called clients with a username and password column.

Now if a login input was scripted with this code then ...