DEV Community

Discussion on: A Complete Guide on How SQL Injection Attacks Work

Collapse
 
sqlrob profile image
Robert Myers

and everyone's password will then be set to password

If that sets passwords to password, you have a lot more issues than just sql injection ;)

Collapse
 
nicholasdill profile image
Nicholas Dill

What? You mean plaintext passwords aren't safe?!

In all seriousness, this is an excellent point. Please don't ever store passwords like this!

This example helps get the point across, but most databases will probably store hashed passwords so even if you attempt to set a user's password to "password", that isn't going to be the password that lets you into their account.