Via fake login pages is the easiest method to hack passwords. Identifying a fake login page is very simple but lots of people ignore to do some small checks before entering the login information and fall in the trap. I have seen a many people paying 400$ for a fake login page of paypal. This proves that there are still people falling in this trap. This is just an example, there are many fake websites of yahoomail, banks, Facebook, hotmail, gmail,orkut,myspace etc …

This article is an attempt to show what a hacker does to hack your password via fake login pages and how to defend yourself from those fake logins.I will try to keep this post as simple as possible, there may be several technical details which you can safely leave out.

Database Servers  Hacking

Databases have been the spirit of a business website. An attack on the database servers can reason a great financial loss for the company. Database servers are generally hacked to get the credit card information. And just one hack on a business site will bring down its repute and also the customers as they also want their credit card info protected. Most of the business websites use Microsoft sql Server (MSsql) and Oracle db servers. MS sql still owns the market because the price is very low. While Oracle servers come with high price. Well some time ago Oracle had claimed itself to be “indestructible” But hackers took it as a dispute and showed lots of bugs in it also.So I just want to share the knowledge with others.
Usually user will type his login name and password in login.htm page and click the submit button. The value of the text boxes will be passed to the login.php or logincheck.asp page where it will be checked using the query string. If it doesn't get an entry fulfilling the query and will arrive at end of file a message of login failed will be displayed. Every thing seems to be OK. But wait a minute. Think again. Is every thing really OK ?!! What about the query ?!! Is it OK. Well if you have made a page like this so what will you do then a hacker can simply login successfully without knowing the password. Want to know How ?