Tag: testing

CREATE

UNION

WHERE

OR

Website with URL https

Website with URL http

Windows application

Only Website with URL http & Windows application

Buffer overflows

SQL Injection

Cross site scripting

Authentication

Authorization

True

False

File Name

File Type

Size

Virus Scanning

True

False

Denial of service

Executing malicious content

Information disclosure

All of the above

Windows authentication

SQL authentication

Form based authentication

Basic authentication

Passport authentication

All of the above

SqlDataAdapter myCommand = new SqlDataAdapter( "SELECT CustomerName, Email, PhoneNo FROM users WHERE cust_id = '" + txtuser.Text + "'", myConnection);

CREATE PROCEDURE procGetUser @custId VARCHAR(5) AS SELECT CustomerName, Email, PhoneNo FROM Customers WHERE cust_id = @custId

SqlDataAdapter myDataAdapter = new SqlDataAdapter("SELECT CustomerName, Email, PhoneNo FROM Customers WHERE cust_id = @cust_id", connection); myCommand.SelectCommand.Parameters.Add("@cust_id", SqlDbType.VarChar,

All the above

Provide highest privilege

Encode all client supplied data

Use of parameterized stored procedure

Providing detailed error message