期刊名称：International Journal of Advanced Research in Computer Engineering & Technology (IJARCET)
印刷版ISSN：2278-1323
出版年度：2016
卷号：5
期号：6
页码：1905-1909
出版社：Shri Pannalal Research Institute of Technolgy
摘要：SQL Injection attacks are done on websites. These websites accept user inputs and produce information requested by user. Attacker modifies these input data and adds own SQL statement along with user input. Due to this, attacker gets access to all information stored confidentially in website's database. This information may contain user's credentials, net banking information, and online booking system data etc. Attacker can misuse this information, in addition attacker can execute malicious statements that may turn off database server, resulting unavailability of websites. Many researchers have proposed techniques to detect SQL injection attacks. In this research paper, different types of SQL Injection attacks are mentioned. The stored procedure may be used as counter measure for SQL Injection attack.
