Preventing MS SQL Injection in Web Application

• Main Author: Khader, Aqeel Sahi
• Format: Thesis
• Language: English; English
• Published: 2010
• Subjects: QA71-90 Instruments and machines
• Online Access: http://etd.uum.edu.my/2360/1/Aqeel_Sahi_Khader.pdf; http://etd.uum.edu.my/2360/2/1.Aqeel_Sahi_Khader.pdf; http://etd.uum.edu.my/2360/; http://lintas.uum.edu.my:8080/elmu/index.jsp?module=webopac-l&action=fullDisplayRetriever.jsp&szMaterialNo=0000764821
• Institution: Universiti Utara Malaysia

A security threat on the Internet is one of the biggest challenges in this time with the great advances in techniques used for attacks. One of the easiest and most serious of these attacks is the MS SQL injection attacks that have come to represent a serious threat to any site or application that contains a database. These attacks could allow an attacker to obtain sensitive information and the value of databases. A method of this attack is easy to learn and the damage caused ranging from reasonable to the detriment of the whole system. Regardless of the damage there are a lot of applications on the Internet vulnerable to this attack. Using some ways can prevent such attacks completely. In this research I will focus on the coding to protect the website from the MS SQL injection attacks by design system to give some information about how to attack using SQL injection and also given the solution for this attack by giving a secure login codes.