Question 1 Which of the following correctly describes SQL injection? Question 1 options: Using the POST method to pass form input to a servlet. Not validating form inputs properly. User-supplied inputs being processed by the database. Using the GET method to pass form input to a servlet. Question 2 Match each concept in the CIA triad with the correct SQL statement. Question 2 options: 123 SELECT 123 UPDATE 123 DELETE FROM 1. Loss of confidentiality 2. Loss of integrity 3. Loss of availability Question 3 Sanitizing form inputs on the client-side will protect against SQL injection attacks. Question 3 options: True False
Added by William B.
Close
Step 1
SQL injection is a type of security vulnerability where an attacker can insert malicious SQL code into a query, which can then be executed by the database. This can occur when user-supplied inputs are not properly validated or sanitized. Step 2: Looking at the Show more…
Show all steps
Your feedback will help us improve your experience
Madhur L and 96 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
Which of the following statements are true regarding PII? Select True or False for each option. PII is information that uniquely identifies you in records that can be obtained online. PII is not always used to illegally gain access to your online records. PII is not safe because only you have this combination of name, social security number, and bank account, credit card numbers, or driver's license number.
Madhur L.
CBR-ERD The following ERD will be used to answer the questions on this examination. You may reference this image on-screen or download the image so that you can more comfortably scroll in to enhance readability. Please use this ERD when answering all questions. Instructions for A: If a table is already properly normalized, then you do not need to make any modifications to it. Only write down your response to those table(s) that require normalization. Answer the following referring to the CUSTOMER schema. You are to properly normalize the tables to 3NF, allowing customers to have more than one phone number. Format: TableName ([PK] Primary Key, [FK] Foreign Key, Attribute Fields)
Akash M.
PL/SQL procedure, parse_name, which accepts a string representing names and returns the first name, the last name, and the title. The first name and last name returned from the procedure should be in uppercase while the title returned should preserve the original case. The input name string is in one of the following two formats: FIRST_NAME LAST_NAME TITLE LAST_NAME, FIRST_NAME TITLE. The first format depicts that the name string starts with a person's first name and last name with a space in between, followed by a space, and then the title of the person. On the other hand, the second format states that the name string starts with a person's first name, followed by a comma and a space, and then the last name suffixed with the title with a space before it. The following are examples of valid name strings conforming to the formats: 1) Jane Doe Ms. 2) Doe, Jane Ms. Your procedure should return JANE for the first name, DOE for the last name, and Ms. for the title for the above two input strings. Also, the following are examples of valid name strings conforming to the formats: 1) Jane Doe MS. 2) Doe, Jane MS. Your procedure should return JANE for the first name, DOE for the last name, and MS. for the title for the above two input strings. Your procedure should generate exceptions if any one of the three components of the input name string is missing. Further, a message should be printed indicating that the input string is invalid. For instance, the following input strings should cause an exception to be generated and the appropriate messages printed: 1) Doe 2) Jane Doe 3) Doe, Jane You should wrap parse_name within an anonymous PL/SQL block that accepts the name string through SQL*Plus substitution variables, calls parse_name with the input string, and then prints the first name, last name, and title returned from the parse_name procedure. You should print the title first, followed by the first name and then the last name, separated by spaces.
Supreeta N.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
Watch the video solution with this free unlock.
EMAIL
PASSWORD