Skip to content
Research Article Open access CC BY 4.0

SQL Injection Attacks Prevention System Technology: Review

Fairoz Q. Kareem, Siddeeq Y. Ameen, Azar Abid Salih, Dindar Mikaeel Ahmed, Shakir Fattah Kak, Hajar Maseeh Yasin, Ibrahim Mahmood Ibrahim, Awder Mohammed Ahmed, Zryan Najat Rashid, Naaman Omar

Asian Journal of Research in Computer Science · pp. 13–32 · Published 6 Jul 2021

10.9734/ajrcos/2021/v10i330242

Abstract

The vulnerabilities in most web applications enable hackers to gain access to confidential and private information. Structured query injection poses a significant threat to web applications and is one of the most common and widely used information theft mechanisms. Where hackers benefit from errors in the design of systems or existing gaps by not filtering the user's input for some special characters and symbols contained within the structural query sentences or the quality of the information is not checked, whether it is text or numerical, which causes unpredictability of the outcome of its implementation. In this paper, we review PHP techniques and other techniques for protecting SQL from the injection, methods for detecting SQL attacks, types of SQL injection, causes of SQL injection via getting and Post, and prevention technology for SQL vulnerabilities.

SQL injection PHP database security.

References (81)

  1. 1 A Classification of SQL-Injection Attacks and Countermeasures
  2. 2 IoT and Cloud Computing Issues, Challenges and Opportunities: A Review [DOI]
  3. 3 Cloud Computing Virtualization of Resources Allocation for Distributed Systems [DOI]
  4. 4 FPGA Implementations for Data Encryption and Decryption via Concurrent and Parallel Computation: A Review [DOI]
  5. 5 Detection of SQL injection based on artificial neural network [DOI]
  6. 6 Distributed Cloud Computing and Distributed Parallel Computing: A Review [DOI]
  7. 7 A State of Art: Survey for Concurrent Computation and Clustering of Parallel Computing for Distributed Systems [DOI]
  8. 8 Design and Analysis of Proposed Remote Controlling Distributed Parallel Computing System Over the Cloud [DOI]
  9. 9 A State of Art for Smart Gateways Issues and Modification [DOI]
  10. 10 A survey on SQL injection: Vulnerabilities, attacks, and prevention techniques [DOI]
  11. 11 Comparing the Effectiveness of Penetration Testing and Static Code Analysis on the Detection of SQL Injection Vulnerabilities in Web Services [DOI]
  12. 12 Predicting common web application vulnerabilities from input validation and sanitization code patterns [DOI]
  13. 13 DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data [DOI]
  14. 14 SQL Injection Attack classification through the feature extraction of SQL query strings using a Gap-Weighted String Subsequence Kernel [DOI]
  15. 15 Use of Query tokenization to detect and prevent SQL injection attacks [DOI]
  16. 16 Research of SQL injection attack and prevention technology [DOI]
  17. 17 Arduino Based Automatic Irrigation System: Monitoring and SMS Controlling [DOI]
  18. 18 ART4SQLi: The ART of SQL Injection Vulnerability Discovery [DOI]
  19. 19 Real Time Video Streaming From Multi-Source Using Client-Server for Video Distribution [DOI]
  20. 20 Detecting SQL Injection Attacks Using Grammar Pattern Recognition and Access Behavior Mining [DOI]
  21. 21 Automated Protection of PHP Applications Against SQL-injection Attacks [DOI]
  22. 22 Generation of Sql-injection Free Secure Algorithm to Detect and Prevent Sql-Injection Attacks [DOI]
  23. 23 Vulnerability Analysis of Content Management Systems to SQL Injection Using SQLMAP [DOI]
  24. 24 A Survey on the Detection of SQL Injection Attacks and Their Countermeasures [DOI]
  25. 25 The impact of SQL injection attacks on the security of databases
  26. 26 Embedded Real-Time Video Surveillance System based on Multi-Sensor and Visual Tracking [DOI]
  27. 27 Two Levels Alert Verification Technique for Smart Oil Pipeline Surveillance System (SOPSS) [DOI]
  28. 28 Dynamic Switching of Scheduling Algorithm for Uplink LTE System [DOI]
  29. 29 Detection and Prevention Cyber-Attacks for Smart Buildings via Private Cloud Environment [DOI]
  30. 30 An Energy-Efficient MIMO-Based 4G LTE-A Adaptive Modulation and Coding Scheme for High Mobility Scenarios [DOI]
  31. 31 System architecture for SQL injection and insider misuse detection system for DBMS [DOI]
  32. 32 Network Forensics for Detecting SQL Injection Attacks Using NIST Method
  33. 33 Web vulnerabilities: identifying patterns and remedies [DOI]
  34. 34 Tracking and Controlling High-Speed Vehicles Via CQI in LTE-A Systems [DOI]
  35. 35 Comparative Performanceof Subcarrier Schedulers in Uplink LTE-A under High Users’ Mobility [DOI]
  36. 36 A Comparative Study for New Aspects to Quantum Key Distribution
  37. 37 Improved hybrid variable and fixed step size least mean square adaptive filter algorithm with application to time varying system identification [DOI]
  38. 38 Model Based Hybrid Approach to Prevent SQL Injection Attacks in PHP [DOI]
  39. 39 Estimating Software Vulnerabilities: A Case Study Based on the Misclassification of Bugs in MySQL Server [DOI]
  40. 40 Real Time Implementation of Stegofirewall System [DOI]
  41. 41 Tracking High-Speed Users Using SNR-CQI Mapping in LTE-A Networks [DOI]
  42. 42 MySQL Database and PHPMyAdmin Installation [DOI]
  43. 43 SQL Injection Attack Principles and Preventive Techniques for PHP Site [DOI]
  44. 44 Research on SQL injection attacks and guard method in web project
  45. 45 Computer access control policy choices [DOI]
  46. 46 Neutralizing SQL Injection Attack on Web Application Using Server Side Code Modification [DOI]
  47. 47 International Journal of Scientific & Engineering Research
  48. 48 International Journal of Computing and Network Technology [DOI]
  49. 49 Multimodal Emotion Recognition using Deep Learning [DOI]
  50. 50 State of Art for Semantic Analysis of Natural Language Processing [DOI]
  51. 51 Comprehensive Survey of Big Data Mining Approaches in Cloud Systems [DOI]
  52. 52 Energy Management for Internet of Things via Distributed Systems [DOI]
  53. 53 Task Scheduling Algorithms in Cloud Computing: A Review [DOI]
  54. 54 Attack and Anomaly Detection in IoT Networks using Machine Learning Techniques: A Review [DOI]
  55. 55 A Study of Moving from Cloud Computing to Fog Computing [DOI]
  56. 56 IoT and ICT based Smart Water Management, Monitoring and Controlling System: A Review [DOI]
  57. 57 Comparison of Software Defined Networking with Traditional Networking [DOI]
  58. 58 State of Art Survey for IoT Effects on Smart City Technology: Challenges, Opportunities, and Solutions [DOI]
  59. 59 A Survey of Optical Fiber Communications: Challenges and Processing Time Influences [DOI]
  60. 60 A Survey of Data Mining Implementation in Smart City Applications [DOI]
  61. 61 A Comprehensive Survey of 5G mm-Wave Technology Design Challenges [DOI]
  62. 62 Comprehensive Survey for Cloud Computing Based Nature-Inspired Algorithms Optimization Scheduling [DOI]
  63. 63 A State of Art Survey for Intelligent Energy Monitoring Systems [DOI]
  64. 64 Clustering Documents based on Semantic Similarity using HAC and K-Mean Algorithms [DOI]
  65. 65 Efficiency of Semantic Web Implementation on Cloud Computing: A Review [DOI]
  66. 66 Efficiency of Malware Detection in Android System: A Survey [DOI]
  67. 67 A Comprehensive Study of Kernel (Issues and Concepts) in Different Operating Systems [DOI]
  68. 68 Neural Networks Architectures Design, and Applications: A Review [DOI]
  69. 69 Deep Learning Approaches for Intrusion Detection [DOI]
  70. 70 A Review of Security Awareness Approaches With Special Emphasis on Gamification [DOI]
  71. 71 Review on Natural Language Processing Based on Different Techniques [DOI]
  72. 72 Web Server Performance Improvement Using Dynamic Load Balancing Techniques: A Review [DOI]
  73. 73 Effects of Parallel Processing Implementation on Balanced Load-Division Depending on Distributed Memory Systems [DOI]
  74. 74 A State of Art for Survey of Combined Iris and Fingerprint Recognition Systems [DOI]
  75. 75 Reliable Communications for Vehicular Networks [DOI]
  76. 76 Smart Android Graphical Password Strategy: A Review [DOI]
  77. 77 Paralinguistic Speech Processing: An Overview [DOI]
  78. 78 Encoding Query Based Lightweight Algorithm for Preventing SQL injection attack
  79. 79 International Journal of Innovation, Creativity and Change [DOI]
  80. 80 International Journal on Computer Science and Engineering [DOI]
  81. 81 International Journal of Computing and Digital Systems [DOI]

Cited by 62

Analysis of Manual and Automated Methods Effectiveness in Website Penetration Testing for Identifying SQL Injection Vulnerabilities

Abdul Aziz Anaoval, Ahmad Turmudi Zy, Suherman S · Journal of Computer Networks, Architecture and High Performance Computing · 2024

SQL Injection Attack Detection using Machine Learning Algorithms

Laila Aburashed, Marah AL Amoush, Wardeh Alrefai · Semarak International Journal of Machine Learning · 2024

SQL Injection Detection Using RNN Deep Learning Model

Abdulbasit Alazzawi · Journal of Applied Engineering and Technological Science (JAETS) · 2023

Towards a User-Friendly Web Application Firewall

F. Omar, D. Ahmed, Omar Elnakib · International Conference on the Internet, Cyber Security and Information Systems · 2023

Analysis of SQLMAP Efficacy in Exploiting SQL Injection Vulnerabilities in Web Applications: A Case Study on DVWA

Hilmi S. Abdullah, Zana O. Hamad, Omed S. Khalind · 2023 International Conference on Engineering Applied and Nano Sciences (ICEANS) · 2023

An Evolutionary Algorithm for Adversarial SQL Injection Attack Generation

Maryam Issakhani, Mufeng Huang, M. A. Tayebi · Intelligence and Security Informatics · 2023

Beyond the Basics: A Study of Advanced Techniques for Detecting and Preventing SQL Injection Attacks

Ashtha Goyal, Priya Matta · 2023 4th International Conference on Smart Electronics and Communication (ICOSEC) · 2023

A study of synergy between programming practices evolution and information disclosure-causing vulnerabilities

Gatha Varma · Iran Journal of Computer Science · 2023

Classification of SQL Injection Attacks using ensemble learning SVM and Naïve Bayes

M. Ibrohim, Vera Suryani · 2023 International Conference on Data Science and Its Applications (ICoDSA) · 2023

Design of The Power Supply and Distribution Monitoring System for NNBI

Yibin Li, Jian Ding, Shi-Hua Song · Journal of Physics, Conference Series · 2023

Showing 47 of 62 known citations — external sources report more than can currently be individually listed.

Related research

Article metrics

Real usage data collected on this platform.

95

Page views

0

PDF downloads

15

Outbound clicks

62

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.