SQL Injections

[sanky12ka4]

Are SQL injections mainly done through forms?

Like sign up forms, user logins forms, and etc?

[offer]

SQL injection is the bypass process that you can query to DB without permission. it happened when webmasters dont have a check on input data. How many method to submit data,there are those ways of SQL injection. I'm a newbie, hope someone give more ideas.

[davehivelocity]

Only if that data goes into a database and there is no method of checking the data to make sure it is correct.

[energizedit]

SQL injections can be done with urls like website.com/?username='delete database'&pass="nothinghere" but yes this would only work if there was no checking of the variables.

Mark

[palinma]

yes, now and day people can inject because the site is not secure enough