<transcript><audio_62>stuff on cashing which you can read offline I am going to skip it there are a few slides on application security and you have a slide on SQL injection this is actually the same stuff which I</transcript><video><caption><image_63>The image is a slide from a presentation about SQL Injection. It has a white background and black text. The slide has a title at the top that reads "SQL Injection" in bold letters. Below the title, there is a list of questions and answers related to the topic. 

The questions are:

- Suppose query is constructed using "X-Y" and "Y-Y".
- Support the user, instead of entering a name, enter, or enter the user's name.
- Be the resulting statement becomes:
- Which is the result of the query?
- User could have been used
- X-Y could have even used

At the bottom of the slide, there are two bullet points that explain the purpose of the question. The first bullet point explains that the query is a SQL injection, while the second bullet point mentions that the user could have a SQL query, which is a type of SQL query that is used to store data in a database or database.

Overall, the slide appears to be discussing the concept of SQL injection and how it can be used to improve the performance of a database.</caption><caption><image_64>The image is a slide from a presentation on SQL Injection. It has a blue background and white text. The slide has a title at the top that reads "SQL Injection" in bold letters. Below the title, there is a list of questions that ask the viewer to answer. 

The questions are:

- Suppose query is constructed using "x" or "y" in the user's name.

Next to the questions, there are two options: "X" and "Y". The first option is "X or Y" and the second option is a "X".

There is also a text box below the questions that reads, "Then the resulting statement becomes:
- "Select from instructor where name = X or Y = Y". The text box is blank, indicating that the user can fill in the correct answer.
- User could have even used "X, update instructor set salary = 1000,000,000".</caption></video><transcript><audio_65>covered in chapter 5 but I just wanted to bring it up again because i want to remind you over and over again that SQL injection is by far the biggest danger and it is also unfortunately the most common loophole that programmers</transcript><transcript><audio_66>strengthening even this semester in this course after i told my student many times about one-fourth of the student projects had SQL injection vulnerability so it's something which has to be driven home you have to be very careful about</transcript><transcript><audio_67>this so let me wrap up with a quiz question but before that and I already told you yesterday about SQL injection we're not going to do it there is one other class of security vulnerability</transcript><transcript><audio_68>called cross-site scripting which can occasionally be an issue it's not very common but it can be a big danger in certain situations where you allow a get method to update the database I told you at the beginning of today's talk if you</transcript> stuff on cashing which you can read offline I am going to skip it there are a few slides on application security and you have a slide on SQL injection this is actually the same stuff which I covered in chapter 5 but I just wanted to bring it up again because i want to remind you over and over again that SQL injection is by far the biggest danger and it is also unfortunately the most common loophole that programmers strengthening even this semester in this course after i told my student many times about one-fourth of the student projects had SQL injection vulnerability so it's something which has to be driven home you have to be very careful about this so let me wrap up with a quiz question but before that and I already told you yesterday about SQL injection we're not going to do it there is one other class of security vulnerability called cross-site scripting which can occasionally be an issue it's not very common but it can be a big danger in certain situations where you allow a get method to update the database I told you at the beginning of today's talk if you
{"source": "grass-yt-cc-by.0RitPJG0BgI|shard_10035_43|create_multimodal_data.extract_yt_and_generate_transcripts.56|shard_10035|create_multimodal_data.generate_captions.29|shard_10035|create_multimodal_data.generate_captions.42", "params": {"id": "0RitPJG0BgI", "channel_id": "UC3lp1Pk33sziERUwvmiNBqQ", "duration": 2528, "view_count": 249, "age_limit": 0, "chapters": [{"start_time": 0, "end_time": 35.0, "title": "<Untitled Chapter 1>"}, {"start_time": 35.0, "title": "Application Architectures", "end_time": 718.0}, {"start_time": 718.0, "title": "Object-Relational Mapping and Hibernate (Cont.) \u2022 The Hibernate object-relational mapping system is widely used public domain system, runs on a variety of database systems \u2022 supports a query language that can express complex queries", "end_time": 728.0}, {"start_time": 728.0, "title": "Web Services . Allow data on Web to be accessed using remote procedure call mechanism . Two approaches are widely used", "end_time": 2528}], "like_count": 4, "channel_follower_count": 34800, "license": "Creative Commons Attribution license (reuse allowed)", "uploader_id": "@StudioIITBombay", "yt_tar_file": "/leonardo_work/EUHPC_E03_068/audio/fixed_download/grass-yt-cc-by//shard_10035/0RitPJG0BgI.tar.gz"}}