December 2015
Intermediate to advanced
232 pages
5h 8m
English
MongoDB and CouchDB[37] are widely used alternatives to relational databases when building Node.js applications. They don’t use a query language like SQL for mapping the data—hence the name NoSQL. Instead they have their own methods and queries. You may now think that using NoSQL means SQL injection is not a problem for you. Alas, that isn’t quite true.
Strictly speaking, SQL injection doesn’t affect NoSQL databases. The thing is, SQL injection isn’t the only form of database injection, and there are other ways to inject commands despite not using the traditional SQL syntax. These NoSQL injection attacks execute within a procedural language rather than in the declarative SQL language, so the potential ...
Read now
Unlock full access