Web Hacking: Attacks and Defense

Chapter 11. Database Access

Â	The true beginning of our end.	Â
Â	--William Shakespeare (1564–1616), A Midsummer Night's Dream, Act V. Sc. 1.

Introduction

Databases (and SQL in specific) have long been an integral part of doing business. Whether it was the first flat file database or today's advanced object-oriented databases, the need for storing and accessing information rapidly is crucial to any business or application—and the Web is no different.

Current Web applications are tightly coupled with the database. They are used for everything from storing usernames and passwords for authenticated access, to storing a users' mailing address and credit card information for product shipment and payment. As a result, a thorough understanding of Web ...