Aug 19, 2011 02:30
13 yrs ago
2 viewers *
English term
open slot
English to Chinese
Tech/Engineering
IT (Information Technology)
SQL injection
A code injection technique simply exploits a security vulnerability occurring in the database layer of an application, with malicious code injected (or typed if you prefer) into any ***open slot*** such as where a user would enter their login details. That malicious code can then provide access to the administrative part of the enterprise’s website with all that entails.
Proposed translations
(Chinese)
4 +1 | (钻)空子 | Carlis Hsu |
3 +1 | 开口 | Judy Su |
4 | 开口槽 | Teplocteur |
Proposed translations
+1
8 mins
Selected
(钻)空子
什么地方有空子,恶意代码就可以往哪里钻
4 KudoZ points awarded for this answer.
Comment: "谢谢!"
+1
4 hrs
开口
利用应用程序数据库层的安全漏洞,将恶意代码注入(或输入)到任意开口,如用户输入登录信息的字段。
例如,
a_variable 表示需要用户输入的内容
statement := "SELECT * FROM `userinfo` WHERE `id` = " + a_variable + ";"
某黑客让 a_variable=1;DROP TABLE `users`
则语句变成: SELECT * FROM `userinfo` WHERE `id`=1;DROP TABLE `users`;
这将删除数据库中的用户,然而这并不是程序的本意。
例如,
a_variable 表示需要用户输入的内容
statement := "SELECT * FROM `userinfo` WHERE `id` = " + a_variable + ";"
某黑客让 a_variable=1;DROP TABLE `users`
则语句变成: SELECT * FROM `userinfo` WHERE `id`=1;DROP TABLE `users`;
这将删除数据库中的用户,然而这并不是程序的本意。
Reference:
Peer comment(s):
agree |
Jun Ng
: "安全漏洞" is pretty accurate. This term is similar to "loop hole" in other contexts as I understand it.
13 hrs
|
2 days 16 hrs
Something went wrong...