SQL
SQL is a programming language commonly used for administering databases. We will look at it from an SQL injection point of view in common web databases such as MySQL. Hence, it's good to know some basic commands and what they do.
Command | Explanation | Example |
---|---|---|
CREATE |
Use with terms 'database' or 'table' to make something. | CREATE DATABASE testing; |
SELECT |
Allows you to select data from a table. | SELECT * from TESTING WHERE id=1; |
UPDATE |
Update a row already in the table. | UPDATE testing SET columnname='data' WHERE id=1; |
INSERT |
Add a new row to the table. | INSERT INTO testing (column1,column2,column3) VALUES ('data1','data2','data3'); |
DROP |
Remove anything in MySQL. | DROP testing; |
GRANT |
Make users and grant permissions in one. | GRANT ALL on testing.* to 'cooluser'@localhost IDENTIFIED BY 'mysuperawesomepassword'; |