A Classification of SQL-Injection Attacks and Countermeasures

摘要: SQL injection attacks pose a serious security threat to Web applications: they allow attackers obtain unrestricted access the databases underlying applications and potentially sensitive information these contain. Although researchers practitioners have proposed various methods address problem, current approaches either fail full scope of problem or limitations that prevent their use adoption. Many are familiar with only subset wide range techniques available who trying take advantage vulnerabilities. As consequence, many solutions in literature some issues related injection. To this we present an extensive review different types known date. For each type attack, provide descriptions examples how could be performed. We also analyze existing detection prevention against attacks. technique, discuss its strengths weaknesses addressing entire