doi: 10.7763/IJIMT.2012.V3.284
A Novel Approach to Prevent SQL Injection Attack Using URL Filter
Sangita Roy1
,
Avinash Kumar Singh2,3 ,
Ashok Singh Sairam1
- 1Computer Science and Engineering Department, Indian Institute of Technology Patna, India.
- 2KIIT University, Bhubaneswar, Orissa, India.
- 3Department of Computer Science, Indian Institute of Information Technology Allahabad, India.
Abstract
Web services are usually supported by a database at the backend while a frontend takes input from the user, construct SQL statements and access the database. SQL injection is a popular technique used by attackers to exploit unsanitized user input vulnerability by convincing the application to run SQL code that it was not intended to run. Validating all user inputs and checking for vulnerability can be tedious on the part of the programmer. In this work we propose a new approach to prevent SQL injection attack using URL filtering. URL filters are used to validate user input to web forms. In this approach a single filter can be used to validate input to several databases which makes our approach more scalable and efficient. We implement the filter using Java servlet and demonstrate its effectiveness.
Keywords
- SOL injection attacks
- prevention
- URL filtering
How to Cite
Sangita Roy, Avinash Kumar Singh, and Ashok Singh Sairam, "A Novel Approach to Prevent SQL Injection Attack Using URL Filter," International Journal of Innovation, Management and Technology, vol. 3, no. 5, pp. 499-502, 2012. https://doi.org/10.7763/IJIMT.2012.V3.284
Copyright & License
Copyright © 2012 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).