80 likes | 295 Views
SQL Crash Course. SQL stands for Structured Query Language Backend of all modern websites You can think about SQL like a large Excel table Only difference is Rows are called Records. SELECT username, FavoriteFood FROM users WHERE IsAdmin =0; .
E N D
SQL Crash Course • SQL stands for Structured Query Language • Backend of all modern websites • You can think about SQL like a large Excel table • Only difference is Rows are called Records
SELECT username, FavoriteFoodFROM users WHEREIsAdmin=0; ACTION ITEMS LOCATION FILTER SELECT * FROM users WHERE username=$var1 AND password=$var2 Select everything from the users table where username is equal to the inputted username and password is also equal to the inputted password.
SQL Injections SELECT * FROM users WHERE username=$var1 AND password=$var2 $var1 = rburden $var2 = 123456 SELECT * FROM users WHERE username=“rburden” AND password=“123456”; $var1 = rburden $var2 = 123456” OR 1==1; SELECT * FROM users WHERE username=“rburden” AND password=“123456” OR 1 == 1;
XSS (Cross Site Scripting) <iframesrc=“http://evilhackerwebsite.com”style="border: 0; width: 100%; height: 100%"> Your browser doesn't support iFrames. </iframe>