12. Harald Vranken, Security in onderwijs en onderzoek
12. Harald Vranken, Security in onderwijs en onderzoek
12. Harald Vranken, Security in onderwijs en onderzoek
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Cursus <strong>Security</strong> <strong>en</strong> IT<br />
Beveilig<strong>in</strong>g van databases<br />
Voorbeeld: SQL-<strong>in</strong>jectie<br />
<strong>Vrank<strong>en</strong></strong><br />
RAbn3%cd<br />
' OR 1=1 --<br />
' OR 1=1 --<br />
SELECT Username<br />
FROM Users<br />
WHERE (Username = '<strong>Vrank<strong>en</strong></strong>‘) AND<br />
SELECT Username<br />
FROM Users<br />
(Password = 'RAbn3%cd‘)<br />
WHERE (Username = '' OR 1=1 --') AND<br />
(Password = '' OR 1=1 --')