WEB系统中SQL注入防御方法的研究

The study of WEB SQL injection defense system method

SQL注入风险已成为WEB应用最大的安全隐患之一,通过介绍SQL注入的本质及特点,详细分析了SQL注入的一般思路和实现方法,最后从服务器IIS设置、数据库设置和程序编写三个方面提出了针对SQL注入的防御措施。

SQL injection risk has become one of the biggest security risks WEB application, the nature and characteristics through the introduction of SQL injection, a detailed analysis of the general ideas and methods SQL injection, and finally write IIS settings from the server, database settings and procedures for the three areas the defense against SQL injection.