What is SQL Injection (SQLi) and How to Prevent Attacks

SQL Injection (SQLi) is one of the many web attack mechanisms used by hackers to steal data. It is perhaps one of the most common application layer attacks. Find out how to prevent it

What is SQL Injection (SQLi) and How to Prevent It SQL Injection (SQLi) is a type of an injection attack that makes it possible to execute malicious SQL statements. These statements control a database server behind a web application. Attackers can use SQL Injection vulnerabilities to bypass application security measures. They can go around authentication and authorization of a web page or web application and retrieve the content of the entire SQL database. They can also use SQL Injection to add, modify, and delete records in the database. An SQL Injection vulnerability may affect any website o

related reading

• Why We Don’t Trust the Database With Authentication – Sturdy Statisticsblog.sturdystatistics.com
• Against SQLscattered-thoughts.net
• Cross-Site Scripting (XSS) | Computer Securitytextbook.cs161.org
• How Does a Database Work?cstack.github.io
• SQL as APIvalentin.willscher.de
• Log4Shell Security Vulnerability | Orca Research Podorca.security
• SQL vs NoSQL in 8 Examples | Towards Data Sciencetowardsdatascience.com
• SQL style guide by Simon Holywellsqlstyle.guide
• SQLAlchemysqlalchemy.org
• CodeQL zero to hero part 1: The fundamentals of static analysis for vulnerability researchgithub.blog
• Cross-Site Request Forgery (CSRF) | Computer Securitytextbook.cs161.org
• The key technologies behind SQL Comprehension | dbt Developer Blogdocs.getdbt.com