Securing Web Application against SQL Injection Attack A Review

Abstract

Nowadays use of web applications are rapidly increasing. We are using various applications to fulfill our daily needs such as online shopping, banking, ticket booking etc. Therefore our private data is available on the databases. Because of rapidly increasing use of web applications, the attacks on web applications are also increasing rapidly.SQL injection is one of the most serious attack on web application. It injects the SQL query and allows attackers to gain unrestricted access to databases underlying applications. In this paper we study about the SQL injection attack and its var ious types. In addition to these we have study that how SQL injection attacks on web applications can be protected or prevented using different types of predefined techniques and also discuss the integrated approach of encoding methodology wit h the combina tion of AES encryption and secure hashing is applied within the database to avoid attack on login section in detail. Lastly we dis cussed the consequences of SQL injection attacks.