SQL注入攻击安全防护技术研究

Research on SQL injection attack security protection technology

随着数据库在Web中的广泛应用,SQL注入已成为黑客攻击数据库的常见手段。为有效预防SQL注入攻击,首先对SQL注入攻击的相关原理进行说明,针对目前SQL注入的攻击特点及其注入流程进行了剖析和研究,给出了几种可有效预防SQL注入攻击的防护方法,并对其最佳的使用情况进行了说明。

With the wide application of database in Web, SQL injection has become the common ways of the hacker attacks against the database. In order to prevent SQL injection attacks effectively, it introduces the principle of SQL injection sttacks. And then it presents analysis and research of SQL injection attacks characteristics and injection process. Finally, it introduces several effective methods to prevent SQL injection attacks and describes the best use of these methods.