SQL injection example Let’s look at a basic SQL injection attack. Suppose you’ve built a web application that lets customers enter their customer IDs and retrieve their customer profiles.

Save that batch script with a .bat extension, like GetCSV.bat. Executing that batch script will open up an ftp connection and fire off your commands resulting in filename.csv being downloaded.