TryHackMe - Content Discovery
β‘sqlinjection is an attack on a web application database server that causes malicious queries to be executed
β‘Statement used to retrieve data - SELECT,
β‘ Statement used to get DATA from multiple tables - UNION
β‘ Statemnet to add DATA - INSERT
In-Band SQL Injection for injection vulnerabilityΒ are (In-Band, Blind and Out Of Band)
π΄ REMEDIATION method - Prepared Statements (With Parameterized Queries), Input Validation, Escaping User InputΒ