Web中SQL注入攻击研究与防范措施的探讨

Research on SQL injection attack in Web and the precautionary measures

随着网络产业的飞速发展,基于B/S三层架构的动态网站越来越多,其安全形势也日渐严峻,SQL注入攻击就是其中最危险、最普遍的攻击之一。文章介绍了SQL注入攻击的技术原理和特点,分析了SQL攻击的过程与方法,最后提出预防SQL注入攻击的防范措施。

With the rapid development of network industry, the dynamic websites based on B/S three-layer structure are becoming more and more and its security situation has become serious. SQL injection attack is one of the most dangerous and common attacks. This paper introduces the technical principles and features of SQL injection attack, analyzes the process and methods of SQL attack and puts forward the precautionary measures.