What is SQL injection? - Web Security Academy

SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. Learn more from the Web Security Academy, by PortSwigger.
Read the full guide: portswigger.net/web-security/...
SQL injection cheat sheet: portswigger.net/web-security/...
Register for free with the Web Security Academy to test yourself in our interactive labs: portswigger.net/web-security

[@bytesunlimitedsecuritytips9095]

Very great video! Thank you! My only complaint is that there was a lot of content mentioned here that could have been slowed down and further explained or better analyzed. Other than that, I will have to watch a few more times to fully grasp it.

[@mrrairai]

This video is amazing! I'm so happy I found it. It makes things make so much more sense now. Thank you.

[@trentashore1059]

Your a legend I couldnt understand wtf 1=1 bs was, but the way you broke it up and showed what was being altered or affected made it sooo easy to understand, big thanks to yall

[@dustinhxc]

Thank you for the academy videos!

[@nandhaKumar-nr8yv]

Really useful! its ultra level. i am very much attracted to the way of teaching by a wonderful instructor. i looking for more videos. You are doing a great job

[@headshotcaptain8389]

Awesome content!

[@paulojr1384]

awesome content PortSwigger
tnx

[@Mohamed-xe7ui]

so great, PLz make more videos for other web academy topics

[@Umar0x01]

02:43 barely held the laugh, hahaha.

[@aaronwhite1786]

I feel like this was actually how they eliminated people at PortSwigger who wanted to host the video. If you couldn't get through that portion of the script without breaking you didn't get the do the video.

[@dranonymous1547]

very good

[@pardeepbhardwaj4251]

Do any practical of sql injection ... create video for practising of sql

[@mothish.]

Make more burb suite academy tutorials please

[@b8akaratn]

Thank you

[@togrow6578]

amazing

[@sumanaswal6557]

thanks for the info
you look like joey king

[@kunjalbhudke80]

Amazing

[@gonzalo635]

NetSec is amazing.

[@PrakashKumar-se1qk]

Prevention part is good and not spoked in many blogs and videos

[@pascallazarus-zm7bf]

wher are the other topics videos

[@AnthonyMcqueen1987]

I have been having so much bad-luck searching for XSS i am thinking of focusing on SQL Injection because its only the database we need to worry about and if valid could bring some major $$$.

[@gkmusicnocopyrightsongs7307]

Send your contact number sir I want your help

[@AnthonyMcqueen1987]

@@gkmusicnocopyrightsongs7307 nope

[@gkmusicnocopyrightsongs7307]

Sir plz help me

[@AnthonyMcqueen1987]

@@gkmusicnocopyrightsongs7307 whats the problem ?

[@gkmusicnocopyrightsongs7307]

My family was poor I want your help plz help in haking tricks

[@pnehru8361]

How did you say username: weiner and password: blue cheese with a completely straight face

[@dhayes5151]

Very well put together. Audio could be better quality however. Thanks!

[@Tekionemission]

Great video, thanks for posting it. Curious, does anyone know what the + is for, i.e.: '+OR+1=1--

[@MrHT1993]

The '+' sign represent concatenation in a URL. If you perform the labs, you will understand.

[@Fahodinho]

+ is a space ' ' URL encoded

[@joojordy5855]

nice

[@amol5436]

@3.10 did they miss a single quote after -- ?

[@cybercog]

no, the single quote is purposefully used to 'break' the SQL formatter and inject your code

[@XaraTVOfficial]

2:43
I wish you had used a form that has Username and Password instead of Email Address and Password to avoid confusion.

[@aesthetic_diabetics]

ya'll really just gonna drop wiener and blue cheese with a straight face... sheeeeeesh

[@opurbovai3414]

I WANT TO WORK WITH YOU

[@pardeepbhardwaj4251]

👍

[@Learnsomethingnew-vk4sn]

Can uh help me i lost my money in an online website

[@stumbras2000]

What should you study in order to understand concepts in this video seems like this is not beginner level...

[@d.j.s.3180]

Девчуля я влюбился

[@philopateermoheb7162]

البت اللي في الفيديو حلوة

[@mohamedreddad2684]

Well, can anyone mention her name or her instagram 🌝

[@kiwinesss]

She talks very very fast, so I had to watch it twice. But thank you for the information.

[@sumanaswal6557]

or you could have slowed it down from the option manu

[@kiwinesss]

@@sumanaswal6557 na I hate doing that, it makes everyone sound like a robot.

[@inyodream642]

@@kiwinesss wtf lol

[@ansh4360]

a

[@APTsec]

her name please... i feel in love :)

[@anoopmv7]

Excellent presentation by a beautiful girl..

[@darrensylvain8868]

Hopefully youtube doesn't demonetize you for suggesting sql injections exist

[@albertomertinez1710]

Do you understand sql injection ... Lots of videos💋💕💕 seems confusing .

[@randymoazha4440]

just want to say, that women is really beautiful.

[@MrDubs]

After watching this video and reading your comment, I commuted to a local sporting goods store and purchased the most powerful pair of binoculars they had available. I then proceeded to traverse the highest mountain in a 200 mile radius of my location five minutes after noon. The day was clear, weather warm, I had visibility for miles in all 360 degrees.
But to my dismay, I still couldn't see who asked.

[@ffgrass4132]

@@MrDubs ahahhaha

[@atikrangnekar3337]

Dekh kr bol rhi hai

[@movietrailerpark]

Understoood nothing