During a security audit, a tester inputs 'OR '1'='1' into a login form to test for SQL injection. This test primarily targets the _________ of the application.

  • Authentication mechanism
  • Authorization logic
  • Input validation
  • Session management
This test primarily targets the input validation of the application. The provided input attempts to manipulate the SQL query by injecting a condition that is always true ('1'='1'). Proper input validation helps prevent SQL injection attacks by validating and sanitizing user inputs before processing them in SQL queries.
Add your answer
Loading...

Leave a comment

Your email address will not be published. Required fields are marked *