Web Site Security for Catalogers

And there’s the rub: Visitors have a channel to talk to your database. If the Web site is coded carefully, there’s no problem with this — the site needs its database to provide and receive information. The problem is, sometimes Web sites aren’t coded carefully. In such cases, hackers can paste sneaky characters into your forms or URLs to run commands against your database. This could let them use your database in ways you didn’t intend. An SQL injection attack is pushing code into a slot where your system expected data.