A hacker sends a database command after regular data in an online submission form. This

command inserts an unauthorized record giving access to the hacker. Which risk is being discussed here?

a. SQL injection

b. HTML

c. Cross-site scripting

d. Java

Answer: SQL injection

Explanation:

SQL injection is a type of risk that could lead to the potential loss of private, personal or confidential information or data, this loss could be through such data being stolen, deleted, accessed by unauthorised users, etc.

SQL (Structured Query Language) is a code added to a web in order to bridge the security and grain access to private data or document. It is a way of hacking into a website or system which is illegal and punishable under the law. SQL injection can be used to hack an ATM, dump unauthorised contents into a system or server, etc.