Thursday, May 7, 2009

..... SQL INJECTION ATTACK .....

When you login to a site you should give a login name and password.



This login menu most probable make using SQL.
That mean every name and password store in SQL database.
SQL injection mean you can log to a WEBSITE with out user name and Password.
The code to use as user name ' OR 1=1 #

If this web site has replace "=" , "# " in SQL database you can't log as this method.
This method work only some of sites.



www.lkhack.blogspot.com