Skip to content
Research Article Open access CC BY 4.0

SQL Injection Attacks Prevention System Technology: Review

Fairoz Q. Kareem, Siddeeq Y. Ameen, Azar Abid Salih, Dindar Mikaeel Ahmed, Shakir Fattah Kak, Hajar Maseeh Yasin, Ibrahim Mahmood Ibrahim, Awder Mohammed Ahmed, Zryan Najat Rashid, Naaman Omar

Asian Journal of Research in Computer Science · pp. 13–32 · Published 6 Jul 2021

10.9734/ajrcos/2021/v10i330242

Abstract

The vulnerabilities in most web applications enable hackers to gain access to confidential and private information. Structured query injection poses a significant threat to web applications and is one of the most common and widely used information theft mechanisms. Where hackers benefit from errors in the design of systems or existing gaps by not filtering the user's input for some special characters and symbols contained within the structural query sentences or the quality of the information is not checked, whether it is text or numerical, which causes unpredictability of the outcome of its implementation. In this paper, we review PHP techniques and other techniques for protecting SQL from the injection, methods for detecting SQL attacks, types of SQL injection, causes of SQL injection via getting and Post, and prevention technology for SQL vulnerabilities.

SQL injection PHP database security.

References (81)

  1. 1 A Classification of SQL-Injection Attacks and Countermeasures
  2. 2 IoT and Cloud Computing Issues, Challenges and Opportunities: A Review [DOI]
  3. 3 Cloud Computing Virtualization of Resources Allocation for Distributed Systems [DOI]
  4. 4 FPGA Implementations for Data Encryption and Decryption via Concurrent and Parallel Computation: A Review [DOI]
  5. 5 Detection of SQL injection based on artificial neural network [DOI]
  6. 6 Distributed Cloud Computing and Distributed Parallel Computing: A Review [DOI]
  7. 7 A State of Art: Survey for Concurrent Computation and Clustering of Parallel Computing for Distributed Systems [DOI]
  8. 8 Design and Analysis of Proposed Remote Controlling Distributed Parallel Computing System Over the Cloud [DOI]
  9. 9 A State of Art for Smart Gateways Issues and Modification [DOI]
  10. 10 A survey on SQL injection: Vulnerabilities, attacks, and prevention techniques [DOI]
  11. 11 Comparing the Effectiveness of Penetration Testing and Static Code Analysis on the Detection of SQL Injection Vulnerabilities in Web Services [DOI]
  12. 12 Predicting common web application vulnerabilities from input validation and sanitization code patterns [DOI]
  13. 13 DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data [DOI]
  14. 14 SQL Injection Attack classification through the feature extraction of SQL query strings using a Gap-Weighted String Subsequence Kernel [DOI]
  15. 15 Use of Query tokenization to detect and prevent SQL injection attacks [DOI]
  16. 16 Research of SQL injection attack and prevention technology [DOI]
  17. 17 Arduino Based Automatic Irrigation System: Monitoring and SMS Controlling [DOI]
  18. 18 ART4SQLi: The ART of SQL Injection Vulnerability Discovery [DOI]
  19. 19 Real Time Video Streaming From Multi-Source Using Client-Server for Video Distribution [DOI]
  20. 20 Detecting SQL Injection Attacks Using Grammar Pattern Recognition and Access Behavior Mining [DOI]
  21. 21 Automated Protection of PHP Applications Against SQL-injection Attacks [DOI]
  22. 22 Generation of Sql-injection Free Secure Algorithm to Detect and Prevent Sql-Injection Attacks [DOI]
  23. 23 Vulnerability Analysis of Content Management Systems to SQL Injection Using SQLMAP [DOI]
  24. 24 A Survey on the Detection of SQL Injection Attacks and Their Countermeasures [DOI]
  25. 25 The impact of SQL injection attacks on the security of databases
  26. 26 Embedded Real-Time Video Surveillance System based on Multi-Sensor and Visual Tracking [DOI]
  27. 27 Two Levels Alert Verification Technique for Smart Oil Pipeline Surveillance System (SOPSS) [DOI]
  28. 28 Dynamic Switching of Scheduling Algorithm for Uplink LTE System [DOI]
  29. 29 Detection and Prevention Cyber-Attacks for Smart Buildings via Private Cloud Environment [DOI]
  30. 30 An Energy-Efficient MIMO-Based 4G LTE-A Adaptive Modulation and Coding Scheme for High Mobility Scenarios [DOI]
  31. 31 System architecture for SQL injection and insider misuse detection system for DBMS [DOI]
  32. 32 Network Forensics for Detecting SQL Injection Attacks Using NIST Method
  33. 33 Web vulnerabilities: identifying patterns and remedies [DOI]
  34. 34 Tracking and Controlling High-Speed Vehicles Via CQI in LTE-A Systems [DOI]
  35. 35 Comparative Performanceof Subcarrier Schedulers in Uplink LTE-A under High Users’ Mobility [DOI]
  36. 36 A Comparative Study for New Aspects to Quantum Key Distribution
  37. 37 Improved hybrid variable and fixed step size least mean square adaptive filter algorithm with application to time varying system identification [DOI]
  38. 38 Model Based Hybrid Approach to Prevent SQL Injection Attacks in PHP [DOI]
  39. 39 Estimating Software Vulnerabilities: A Case Study Based on the Misclassification of Bugs in MySQL Server [DOI]
  40. 40 Real Time Implementation of Stegofirewall System [DOI]
  41. 41 Tracking High-Speed Users Using SNR-CQI Mapping in LTE-A Networks [DOI]
  42. 42 MySQL Database and PHPMyAdmin Installation [DOI]
  43. 43 SQL Injection Attack Principles and Preventive Techniques for PHP Site [DOI]
  44. 44 Research on SQL injection attacks and guard method in web project
  45. 45 Computer access control policy choices [DOI]
  46. 46 Neutralizing SQL Injection Attack on Web Application Using Server Side Code Modification [DOI]
  47. 47 International Journal of Scientific & Engineering Research
  48. 48 International Journal of Computing and Network Technology [DOI]
  49. 49 Multimodal Emotion Recognition using Deep Learning [DOI]
  50. 50 State of Art for Semantic Analysis of Natural Language Processing [DOI]
  51. 51 Comprehensive Survey of Big Data Mining Approaches in Cloud Systems [DOI]
  52. 52 Energy Management for Internet of Things via Distributed Systems [DOI]
  53. 53 Task Scheduling Algorithms in Cloud Computing: A Review [DOI]
  54. 54 Attack and Anomaly Detection in IoT Networks using Machine Learning Techniques: A Review [DOI]
  55. 55 A Study of Moving from Cloud Computing to Fog Computing [DOI]
  56. 56 IoT and ICT based Smart Water Management, Monitoring and Controlling System: A Review [DOI]
  57. 57 Comparison of Software Defined Networking with Traditional Networking [DOI]
  58. 58 State of Art Survey for IoT Effects on Smart City Technology: Challenges, Opportunities, and Solutions [DOI]
  59. 59 A Survey of Optical Fiber Communications: Challenges and Processing Time Influences [DOI]
  60. 60 A Survey of Data Mining Implementation in Smart City Applications [DOI]
  61. 61 A Comprehensive Survey of 5G mm-Wave Technology Design Challenges [DOI]
  62. 62 Comprehensive Survey for Cloud Computing Based Nature-Inspired Algorithms Optimization Scheduling [DOI]
  63. 63 A State of Art Survey for Intelligent Energy Monitoring Systems [DOI]
  64. 64 Clustering Documents based on Semantic Similarity using HAC and K-Mean Algorithms [DOI]
  65. 65 Efficiency of Semantic Web Implementation on Cloud Computing: A Review [DOI]
  66. 66 Efficiency of Malware Detection in Android System: A Survey [DOI]
  67. 67 A Comprehensive Study of Kernel (Issues and Concepts) in Different Operating Systems [DOI]
  68. 68 Neural Networks Architectures Design, and Applications: A Review [DOI]
  69. 69 Deep Learning Approaches for Intrusion Detection [DOI]
  70. 70 A Review of Security Awareness Approaches With Special Emphasis on Gamification [DOI]
  71. 71 Review on Natural Language Processing Based on Different Techniques [DOI]
  72. 72 Web Server Performance Improvement Using Dynamic Load Balancing Techniques: A Review [DOI]
  73. 73 Effects of Parallel Processing Implementation on Balanced Load-Division Depending on Distributed Memory Systems [DOI]
  74. 74 A State of Art for Survey of Combined Iris and Fingerprint Recognition Systems [DOI]
  75. 75 Reliable Communications for Vehicular Networks [DOI]
  76. 76 Smart Android Graphical Password Strategy: A Review [DOI]
  77. 77 Paralinguistic Speech Processing: An Overview [DOI]
  78. 78 Encoding Query Based Lightweight Algorithm for Preventing SQL injection attack
  79. 79 International Journal of Innovation, Creativity and Change [DOI]
  80. 80 International Journal on Computer Science and Engineering [DOI]
  81. 81 International Journal of Computing and Digital Systems [DOI]

Cited by 62

Common vulnerabilities in real world web applications

N. Krishnaraj, Chirag Madaan, S. Awasthi · doors · 2023

Enhancing the Performance of SQL Injection Attack Detection through Probabilistic Neural Networks

F. Alarfaj, N. Khan · Applied Sciences · 2023

Thwart and Safeguard of Cyber Crime & Cyber Attack in Computer Networks

Kurian M. J., S. D · International Journal of Innovative Technology and Exploring Engineering · 2023

Application Security using SQL Malware Detection and Prevention Scheme

Dhananjay Kumar Yadav, Mithilesh Kumar Singh Yadav · 2022 IEEE International Conference on Current Development in Engineering and Technology (CCET) · 2022

Towards Dynamic Capture-The-Flag Training Environments For Reinforcement Learning Offensive Security Agents

R. Chetwyn, L. Erdodi · 2022 IEEE International Conference on Big Data (Big Data) · 2022

Prevention of Data Loss with SQLI

K. Surendhar, Mudimadugu Reddy Sai Nikhil, G. Keerthana · 2022 Second International Conference on Advanced Technologies in Intelligent Control, Environment, Computing & Communication Engineering (ICATIECE) · 2022

PERBANDINGAN TOOLS SQL SUS, SQL NINJA, DAN THE MOLE DALAM PENERAPAN SQL INJECTION

Gusti Ayu Mas Ekayanti, Dewa Ayu Deby Cintiya, P. Suartana · Jurnal Informatika, Teknologi dan Sains · 2022

Analysis of SQL Injection Attack Detection and Prevention on MySQL Database Using Input Categorization and Input Verifier

A.S. Arif, Rahmat Purwoko, Nurul Qomariasih · IEEE International Conference on Information Theory and Information Security · 2022

The Detection and Defense Mechanism for SQL Injection Attack Based on Web Application

Min Li, Ran-Xin Gao, Guanlin Si · IEEE Joint International Information Technology and Artificial Intelligence Conference · 2022

A Novel SQL Injection Detection Using Bi-LSTM and TF-IDF

I. Ghozali, Misbachul Falach Asy'ari, Sulaiman Triarjo · 2022 7th International Conference on Information and Network Technologies (ICINT) · 2022

Showing 47 of 62 known citations — external sources report more than can currently be individually listed.

Related research

Article metrics

Real usage data collected on this platform.

95

Page views

0

PDF downloads

15

Outbound clicks

62

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.