S
Rajanikant Hawaldar
Consider below query , i am passing (-- double dash in username to bypass password)
SqlCommand cmd=new SqlCommand("Select * from users where username=@UserName and Password=@password",con );
Now , i am passing username as Sachin'-- and with password field empty.
According to me , the query now becomes
Select * from users where username='Rajanikant'--' and Password=''
As you can see, it seems like i am successfully able to bypaas Password , i just wanted to know how the query is constructed when parameters are used , cause obviously it prevents SQL injection.
Please take the same example and clearify.
SqlCommand cmd=new SqlCommand("Select * from users where username=@UserName and Password=@password",con );
Now , i am passing username as Sachin'-- and with password field empty.
According to me , the query now becomes
Select * from users where username='Rajanikant'--' and Password=''
As you can see, it seems like i am successfully able to bypaas Password , i just wanted to know how the query is constructed when parameters are used , cause obviously it prevents SQL injection.
Please take the same example and clearify.
storing the password in DB directly is bad idea. First of all you should store this as MD5 or something like that and client application don't know algorithm to hash. Anyway, your second way don't return any user because you search an user with empty password