First Blood / Web hacking boshlang'ich

SQL Injection asoslari

0/16questions

WalkthroughEasy ~45 min 100 XP Lab

Topic 1 / 7

SQLi nima va qanday ishlaydi?

Theory 0/3 questions

lockThis content isn't available in English yetAvailable in: O'zbek

Questions — 0/3

Medium+15 XP

Zaif login kodida foydalanuvchi username maydoniga `' OR '1'='1` kiritadi. SQL so'rovi qanday o'zgaradi va nima bo'ladi?

Easy+10 XP

Parametrlangan so'rovda (prepared statement) foydalanuvchi ma'lumoti qanday uzatiladi?

Hard+20 XP

Quyidagi ikki yondashuv ichida qaysi biri SQL Injection'ga zaif va nima uchun? (A) `cursor.execute("SELECT * FROM users WHERE name = %s", (name,))` (B) `cursor.execute("SELECT * FROM users WHERE name = '" + name + "'")`