View Single Post
  #6 (permalink)  
Old 12-18-07, 01:30 PM
algorithm algorithm is offline
Newbie Coder
 
Join Date: Dec 2007
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
The idea of SQl injection is to convince the application to run SQL code that was not intended

The attacker can know the table names from the error messages (error (server failure) returned by the SQl server.

First apply blind SQl injection And some guess work will get you the error messages that will have useful information. From this information shown by the error messages ,one can have the database table names

Regards
Reply With Quote