SQL Injection - Simply Explained

A simple way to explain the basics of SQL injection through interpretive animation.

[smeeangle]

A one of the best videos I ever watched.

[martinhaller]

Very well done. Starting my training in cybersecurity and your video really cleared up the fog. Thank you.

[aznashwan]

This is a really nice, informative, short and sweet video. Good job man :D

[AnthonyMcqueen]

Straight to the point which i love not some long and boring explaination.

[zoltaanone]

Nice explanation, I needed this for my exam. cheers mate.

[KittyPikaChu]

I watched so many other sql injection videos and I didn't understand them but this one actually helped! tysm~

[aevasconcellos]

Wow nice video, with a little amount of subs and this content is amazing

[ImGeoX]

Man this was a great video... wish you had made more covering other types of attacks..

[najla]

thank you, very helpful
but please make the background music low.

[genxploit]

Can you say me from where you taken this video ?

[chucknor]

Would the error thats displays the server name show in the Chrome console logs if the website wasn't protected?

[TotalTech_]

Did you create this yourself?
If so what program did you use?
If not who did you get to make this?

What are tools do you make this video ??
Could you share this source to me

[Jonayk]

good video helped me with my exam thanks +1

[RealEstateDatabase]

SELECT id FROM users WERE username ='chris' and password='mypass'
What If you manage to inject (' or 1=1) into the query above, which id will be returned or selected?
How likely is it that the returned id has any admin rights?
Are there humans who still use input fields without parameters?

[bassveevo]

Watched two long videos n didn’t get it until this one

[mukulmanocha]

Simply remove space using str replace from remote string



All safe due to without space remove query is imposible

[CariagaXIII]

can i make a typography video with your voice :) i will give you all of the credit

[lanslater]

oh drop the music background volume for faaaxache

[csandreas]

Just use prepared statements and bound parameters. Problem solved