[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-571619-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-571619-en":127},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","sql-injection-sqli-security-in-organizations-and-computer-science","SQL Injection - SQLi - Segurança nas Organizações e Informática","","SQL Injection (SQLi) targets SQL databases through web vulnerabilities created by unsafe handling of untrusted input. When user-supplied data is concatenated directly into SQL code, the database interprets the combined text as a query, enabling attackers to break syntax and potentially control query execution. Examples show how crafted quotes can trigger errors and how payloads may attempt more aggressive actions such as stacked queries or commands like DROP TABLE, depending on the lab’s database interface behavior.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/general/","General",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/sql-injection-sqli-security-in-organizations-and-computer-science/571619/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/sql-injection-sqli-security-in-organizations-and-computer-science/571619.png","ImageObject",442,249,{"name":42,"@type":43},"Well Done","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-22","2026-10-13",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",8,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What is the main cause of SQL Injection in web applications?","Question",{"text":63,"@type":64},"Untrusted input is concatenated with SQL code, so the database interprets the combined text as a query.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"How does an attacker test whether the SQL query can be controlled?",{"text":68,"@type":64},"By using crafted input that breaks the SQL syntax and observing the resulting behavior, which indicates the query construction is affected.",{"name":70,"@type":61,"acceptedAnswer":71},"Why might a stacked-query payload not execute the second statement in the lab?",{"text":72,"@type":64},"The lab uses mysqli_query(), and the example notes that this call does not execute the second statement.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},571619,1792083794,{"code":4,"msg":82,"data":83},"success",[84,89,94,99,104,109,114,119,124],{"id":85,"doc_module":22,"doc_module_name":25,"category_name":86,"show_sort_weight":87,"slug":88},11,"Presentations",90,"presentations",{"id":90,"doc_module":22,"doc_module_name":25,"category_name":91,"show_sort_weight":92,"slug":93},12,"Resumes",80,"resumes",{"id":95,"doc_module":22,"doc_module_name":25,"category_name":96,"show_sort_weight":97,"slug":98},14,"Invoices",70,"invoices",{"id":100,"doc_module":22,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},15,"Posters",60,"posters",{"id":105,"doc_module":22,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},16,"Social Media",50,"social-media",{"id":110,"doc_module":22,"doc_module_name":25,"category_name":111,"show_sort_weight":112,"slug":113},17,"Forms",40,"forms",{"id":115,"doc_module":22,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},18,"Letters",30,"letters",{"id":120,"doc_module":22,"doc_module_name":25,"category_name":121,"show_sort_weight":122,"slug":123},21,"Paper Templates",5,"papers-templates",{"id":125,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":4,"slug":126},158,"general-158",{"code":4,"msg":82,"data":128},{"doc_id":79,"user_id":129,"nickname":42,"user_avatar":130,"doc_module":22,"category_id":125,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":136,"language":137,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":12,"update_tm":141,"read_time":122},5909892210082,"https://ap-avatar.wpscdn.com/avatar/56001069da27c9f41e8?x-image-process=image/resize,m_fixed,w_180,h_180&k=1789614185077863061","\\#3 SQL Injection-SQLi  \nSEGURANÇA NAS ORGANIZAÇÕES E INFORMÁTICA  \n2026/2027  \nOperation Ecosystem  \nWeb Architecture  \nReference: [https://reinvently.com/blog/fundamentals-web-application-architecture/](https://reinvently.com/blog/fundamentals-web-application-architecture/)  \nSIO 2026/2027  \n2  \n Operation Ecosystem  \nWeb Architecture  \nEach subsystem is prone to  \nvulnerabilities, which can lead to attacks  \nReference: [https://reinvently.com/blog/fundamentals-web-application-architecture/](https://reinvently.com/blog/fundamentals-web-application-architecture/)  \nSIO 2026/2027  \n3  \n Operation Ecosystem  \nWeb Architecture  \nSQL Injections are one type of web vulnerabilities which targets SQL databases  \nReference: [https://reinvently.com/blog/fundamentals-web-application-architecture/](https://reinvently.com/blog/fundamentals-web-application-architecture/)  \nSIO 2026/2027  \n4  \n SQL Injection  \n Why it happens  \nUntrusted input is concatenated with SQL code.  \nThe database interprets the combined text as a query.  \nSIO 2026/2027  \n5  \n SQL Injection  \n Example  \nThe developer created a SQL query to verify if the username and password exists in the database  \nquery = \"SELECT user FROM users WHERE user='\" + user + \"' AND password='\" + password + \"'\"  \nSIO 2026/2027  \n6  \n SQL Injection  \n Example  \nWhat if my name is ‘ ?  \nuser = \"'\"  \nSELECT user FROM users WHERE user= ''' AND password='\u003Cany value>'  \nThe extra quote changes the SQL syntax. The server returns a syntax error.  \nError ≠ confirmed exploit  \nquery = \"SELECT user FROM users WHERE user='\" + user + \"' AND password='\" + password + \"'\"  \nSIO 2026/2027  \n7  \n SQL Injection  \n Example  \nWhat if my name is ‘ ?  \nuser = \"'\"  \nSELECT user FROM users WHERE user= ''' AND password='\u003Cany value>'  \nThe input broke the SQL syntax.  \nNext: test whether the query can be controlled.  \nquery = \"SELECT user FROM users WHERE user='\" + user + \"' AND password='\" + password + \"'\"  \nSIO 2026/2027  \n8  \n SQL Injection  \n A more significant attack  \nLet’s play with the user name:  \nuser = \"admin'; -- // \"  \nSELECT user FROM users WHERE user= 'admin' ; -- //' AND password='\u003Cany value>'  \nquery = \"SELECT user FROM users WHERE user='\" + user + \"' AND password='\" + password + \"'\"  \nSIO 2026/2027  \n9  \n SQL Injection  \n A more aggressive attack  \nLet’s play with the user name:  \nuser = \"'; DROP TABLE users; -- // \"  \nSELECT user FROM users WHERE user= '' ; DROP TABLE users ; -- //' AND password='\u003Cany value>'  \nConceptual stacked-query example  \nThe lab uses mysqli_query(): this call does not execute the second statement.  \nquery = \"SELECT user FROM users WHERE user='\" + user + \"' AND password='\" + password + \"'\"  \nSIO 2026/2027  \n10","cbCailBCojtKmjnQ","https://ap.wps.com/l/cbCailBCojtKmjnQ","pdf",829358,13,"English","# SQL Injection - SQLi\n## Why it happens\n## Example\n## A more significant attack\n## A more aggressive attack","[{\"question\":\"What is the main cause of SQL Injection in web applications?\",\"answer\":\"Untrusted input is concatenated with SQL code, so the database interprets the combined text as a query.\"},{\"question\":\"How does an attacker test whether the SQL query can be controlled?\",\"answer\":\"By using crafted input that breaks the SQL syntax and observing the resulting behavior, which indicates the query construction is affected.\"},{\"question\":\"Why might a stacked-query payload not execute the second statement in the lab?\",\"answer\":\"The lab uses mysqli_query(), and the example notes that this call does not execute the second statement.\"}]","SQL Injection - SQLi - Segurança nas Organizações e Informática | PDF",1791922747]