SQL INJECTION ATTACKS AND PREVENTION TECHNIQUES

Abstract

SQL injection attacks are a serious security threat to Web applications. They allow attackers to obtain unrestricted access to the databases underlying the applications and to the potentially sensitive information these database contain. Various resear chers have proposed various methods to address the SQL injection problem. To address this problem, we present an extensive review of the various types of SQL injection attacks. For each type of attack, we provide descriptions and examples of how attacks of that type could be performed. We also present a methodology to prevent the SQL injection attacks.