The week's pick
Random Articles
Reseach Article
Injection, Detection, Prevention of SQL Injection Attacks
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 87 - Number 7 |
| Year of Publication: 2014 |
| Authors: Abhay K. Kolhe, Pratik Adhikari |
10.5120/15224-3739
|
Abhay K. Kolhe, Pratik Adhikari . Injection, Detection, Prevention of SQL Injection Attacks. International Journal of Computer Applications. 87, 7 ( February 2014), 40-43. DOI=10.5120/15224-3739
Abstract
SQL injections have been always the top most priority for any website and web application. Every web application and website developed in php, asp. net, jsp which is connected to the database like MySQL, Microsoft SQL Server, and oracle are prone to SQL injection attacks. Most of the websites are created by using open source language such as php. The paper focuses the types of SQL injection attacks on the open source database in MySQL . The aim is to create a dummy web site where users can login and register. The attacker can login these dummy website using different types of SQL injection, make changes in the database, detect these types of attacks using IP tracking methods with their injection types and to prevent them.
References
- https://www. owasp. org/index. php/Top_10_2013-Top_10 25th Nov 2013.
- http://technet. microsoft. com/enus/library/ms161953(v=SQL. 105). aspx 25th Nov 2013.
- Ramakanth Dorai,Vinod Kannan, "SQL Injection-Database Attack Revolution and Prevention", Journal of International Commercial Law and TechnologyVol6, Issue 4 (2011).
- Perumalsamy Ramasamy, Dr. Sunitha Abburu,"SQL INJECTION ATTACK DETECTION AND PREVENTION" International Journal of Engineering Science and Technology (IJEST) ISSN: 0975-5462 Vol. 4 No. 04 April 2012
- http://php. net/manual/en/function. mySQL-real-escape-string. php 26 Nov 2013
- http://www. php. net/manual/en/mySQLi. quickstart. multiple-statement. php 26 Nov 2013
- http://us1. php. net/mySQL_error 26 Nov 2013
- Sid Ansari,Edward R. Sykes ,"SQL Injection in Oracle: An exploration of vulnerabilities", International Journal on Computer Science and Engineering (IJCSE) ISSN :0975-3397 Vol. 4 No. 04 April 2012 522.
- Zeinab Raveshi, Sonali R. Idate," Investigation and Analysis of SQL Injection Attacks on Web Applications: Survey", International Journal of Engineering and Advanced Technology (IJEAT) ISSN: 2249 – 8958, Volume-2, Issue-3 February 2013.
Index Terms
Keywords