Yes, SQL injection is still possible in 2019. Despite advancements in security measures and awareness about this vulnerability, many websites and applications are still vulnerable to SQL injection attacks. It remains a common attack vector for hackers to exploit and gain unauthorized access to databases. It is crucial for developers to implement proper input validation and parameterized queries to prevent SQL injection attacks. **

Yes, an SQL injection attempt can be punishable by law. In many jurisdictions, attempting to exploit vulnerabilities in computer systems, including SQL injection attacks, can be considered a criminal offense under laws related to unauthorized access to computer systems, data theft, or computer fraud. Penalties for such offenses can include fines, imprisonment, or other legal consequences. It is important for individuals to understand and comply with the laws and regulations related to computer security and data protection to avoid legal repercussions. **

To prevent SQL injection, one can use parameterized queries or prepared statements in their code to ensure that user input is treated as data rather than executable code. Additionally, input validation can be implemented to restrict the type and format of user input. To prevent Cross-Site Scripting, one can sanitize user input by encoding special characters and validating input fields to only allow certain types of data. Using security mechanisms like Content Security Policy (CSP) can also help prevent XSS attacks by restricting the sources from which resources can be loaded on a webpage. Regularly updating software and libraries, as well as conducting security audits, can also help prevent both SQL injection and Cross-Site Scripting vulnerabilities. **

Sure! Here are a few exercises you can try to practice SQL injection: 1. Use a vulnerable web application or a purposely built SQL injection lab to practice exploiting SQL injection vulnerabilities. Try to manipulate the input fields to inject SQL commands and retrieve sensitive information from the database. 2. Write your own simple web application with a vulnerable input field and try to exploit it using SQL injection. This will help you understand how SQL injection works and how to prevent it in your own code. 3. Research and practice using different types of SQL injection techniques, such as error-based, union-based, and blind SQL injection. This will give you a better understanding of the various ways attackers can exploit SQL injection vulnerabilities. Remember to always practice ethical hacking and only test on systems that you have permission to access. **