12 posts

Bảo mật

What is SQL Injection? Database Attacks and Prevention
Security

What is SQL Injection? Database Attacks and Prevention

SQL Injection (SQLi) is an OWASP A03:2021 vulnerability that lets attackers inject malicious SQL into application queries to access or delete entire databases. Learn the attack mechanism, example payloads, and prevention with Prepared Statements.

06 May, 2026 11 min
What is XSS? Cross-Site Scripting Attacks and Prevention
Security

What is XSS? Cross-Site Scripting Attacks and Prevention

XSS (Cross-Site Scripting) is an OWASP A03:2021 vulnerability that lets attackers inject malicious scripts into web pages, stealing cookies, hijacking accounts, or redirecting users. Learn about 3 XSS types, example payloads, and prevention with CSP and HTML encoding.

27 Jul, 2026 7 min
Page 2 / 2