DEFEATING SQL INJECTION USING QUERY STRING ATTACK PREVENTION TECHNIQUE

The ever - increasing dependence on web applications have made a natural target for attackers. Among these attacks SQL Injection Attacks (SQLIA) are the most common. SQL injection attack is a technique to exploit security vulnerability in the database layer of a Web application. In SQLIA, the attacker injects some malicious query to the database in order to change the structure of the query intended by the programmer an d thereafter, gain access of database. After accessing the user’s data the actual database can be changed or modified or destroyed. The main cause of such type of attack is the lack of input validation and web administration.