SQL Injection Attack: What is it, and how to prevent it.
The way that Yahoo! was hacked, SQL Injection attack, is the same method as many other hacks in the news recently: SQL Injection. SQL Injection attacks are common for the following reasons:
• The prevalence of SQL Injection vulnerabilities
• Databases are attractive targets because they typically contain critical application information
• The approach (i.e., the hack) is not new and is well documented on dozens of forums