web security

Question 1

What is SQL Injection?

Answer 1

SQL injection is a code injection technique to either bypass authentication or insert malicious code that might destroy your database.

Question 2

Methods to protect from SQL injection?

Answer 2

1. Sanitization of inputs parameters
2. Use Prepared Statements
3. Remove literals like ; or ‘
4. Use escape for character

Question 3

Types of Cross site scripting( XSS)

Answer 3

1. Non-persistent/Reflected XSS
2. Persistent/Stored XSS
3. DOM-based XSS

Question 4

Methods to protect from XSS

Answer 4

1. Sanitization

2. Check if the input has js code

Question 5

Directory Traversal

Question 6

XSRF

Question 7

Clickjacking