Skip to content
Research Article Open access CC BY 4.0

SQL Injection Attacks Prevention System Technology: Review

Fairoz Q. Kareem, Siddeeq Y. Ameen, Azar Abid Salih, Dindar Mikaeel Ahmed, Shakir Fattah Kak, Hajar Maseeh Yasin, Ibrahim Mahmood Ibrahim, Awder Mohammed Ahmed, Zryan Najat Rashid, Naaman Omar

Asian Journal of Research in Computer Science · pp. 13–32 · Published 6 Jul 2021

10.9734/ajrcos/2021/v10i330242

Abstract

The vulnerabilities in most web applications enable hackers to gain access to confidential and private information. Structured query injection poses a significant threat to web applications and is one of the most common and widely used information theft mechanisms. Where hackers benefit from errors in the design of systems or existing gaps by not filtering the user's input for some special characters and symbols contained within the structural query sentences or the quality of the information is not checked, whether it is text or numerical, which causes unpredictability of the outcome of its implementation. In this paper, we review PHP techniques and other techniques for protecting SQL from the injection, methods for detecting SQL attacks, types of SQL injection, causes of SQL injection via getting and Post, and prevention technology for SQL vulnerabilities.

SQL injection PHP database security.

References (81)

  1. 1 A Classification of SQL-Injection Attacks and Countermeasures
  2. 2 IoT and Cloud Computing Issues, Challenges and Opportunities: A Review [DOI]
  3. 3 Cloud Computing Virtualization of Resources Allocation for Distributed Systems [DOI]
  4. 4 FPGA Implementations for Data Encryption and Decryption via Concurrent and Parallel Computation: A Review [DOI]
  5. 5 Detection of SQL injection based on artificial neural network [DOI]
  6. 6 Distributed Cloud Computing and Distributed Parallel Computing: A Review [DOI]
  7. 7 A State of Art: Survey for Concurrent Computation and Clustering of Parallel Computing for Distributed Systems [DOI]
  8. 8 Design and Analysis of Proposed Remote Controlling Distributed Parallel Computing System Over the Cloud [DOI]
  9. 9 A State of Art for Smart Gateways Issues and Modification [DOI]
  10. 10 A survey on SQL injection: Vulnerabilities, attacks, and prevention techniques [DOI]
  11. 11 Comparing the Effectiveness of Penetration Testing and Static Code Analysis on the Detection of SQL Injection Vulnerabilities in Web Services [DOI]
  12. 12 Predicting common web application vulnerabilities from input validation and sanitization code patterns [DOI]
  13. 13 DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data [DOI]
  14. 14 SQL Injection Attack classification through the feature extraction of SQL query strings using a Gap-Weighted String Subsequence Kernel [DOI]
  15. 15 Use of Query tokenization to detect and prevent SQL injection attacks [DOI]
  16. 16 Research of SQL injection attack and prevention technology [DOI]
  17. 17 Arduino Based Automatic Irrigation System: Monitoring and SMS Controlling [DOI]
  18. 18 ART4SQLi: The ART of SQL Injection Vulnerability Discovery [DOI]
  19. 19 Real Time Video Streaming From Multi-Source Using Client-Server for Video Distribution [DOI]
  20. 20 Detecting SQL Injection Attacks Using Grammar Pattern Recognition and Access Behavior Mining [DOI]
  21. 21 Automated Protection of PHP Applications Against SQL-injection Attacks [DOI]
  22. 22 Generation of Sql-injection Free Secure Algorithm to Detect and Prevent Sql-Injection Attacks [DOI]
  23. 23 Vulnerability Analysis of Content Management Systems to SQL Injection Using SQLMAP [DOI]
  24. 24 A Survey on the Detection of SQL Injection Attacks and Their Countermeasures [DOI]
  25. 25 The impact of SQL injection attacks on the security of databases
  26. 26 Embedded Real-Time Video Surveillance System based on Multi-Sensor and Visual Tracking [DOI]
  27. 27 Two Levels Alert Verification Technique for Smart Oil Pipeline Surveillance System (SOPSS) [DOI]
  28. 28 Dynamic Switching of Scheduling Algorithm for Uplink LTE System [DOI]
  29. 29 Detection and Prevention Cyber-Attacks for Smart Buildings via Private Cloud Environment [DOI]
  30. 30 An Energy-Efficient MIMO-Based 4G LTE-A Adaptive Modulation and Coding Scheme for High Mobility Scenarios [DOI]
  31. 31 System architecture for SQL injection and insider misuse detection system for DBMS [DOI]
  32. 32 Network Forensics for Detecting SQL Injection Attacks Using NIST Method
  33. 33 Web vulnerabilities: identifying patterns and remedies [DOI]
  34. 34 Tracking and Controlling High-Speed Vehicles Via CQI in LTE-A Systems [DOI]
  35. 35 Comparative Performanceof Subcarrier Schedulers in Uplink LTE-A under High Users’ Mobility [DOI]
  36. 36 A Comparative Study for New Aspects to Quantum Key Distribution
  37. 37 Improved hybrid variable and fixed step size least mean square adaptive filter algorithm with application to time varying system identification [DOI]
  38. 38 Model Based Hybrid Approach to Prevent SQL Injection Attacks in PHP [DOI]
  39. 39 Estimating Software Vulnerabilities: A Case Study Based on the Misclassification of Bugs in MySQL Server [DOI]
  40. 40 Real Time Implementation of Stegofirewall System [DOI]
  41. 41 Tracking High-Speed Users Using SNR-CQI Mapping in LTE-A Networks [DOI]
  42. 42 MySQL Database and PHPMyAdmin Installation [DOI]
  43. 43 SQL Injection Attack Principles and Preventive Techniques for PHP Site [DOI]
  44. 44 Research on SQL injection attacks and guard method in web project
  45. 45 Computer access control policy choices [DOI]
  46. 46 Neutralizing SQL Injection Attack on Web Application Using Server Side Code Modification [DOI]
  47. 47 International Journal of Scientific & Engineering Research
  48. 48 International Journal of Computing and Network Technology [DOI]
  49. 49 Multimodal Emotion Recognition using Deep Learning [DOI]
  50. 50 State of Art for Semantic Analysis of Natural Language Processing [DOI]
  51. 51 Comprehensive Survey of Big Data Mining Approaches in Cloud Systems [DOI]
  52. 52 Energy Management for Internet of Things via Distributed Systems [DOI]
  53. 53 Task Scheduling Algorithms in Cloud Computing: A Review [DOI]
  54. 54 Attack and Anomaly Detection in IoT Networks using Machine Learning Techniques: A Review [DOI]
  55. 55 A Study of Moving from Cloud Computing to Fog Computing [DOI]
  56. 56 IoT and ICT based Smart Water Management, Monitoring and Controlling System: A Review [DOI]
  57. 57 Comparison of Software Defined Networking with Traditional Networking [DOI]
  58. 58 State of Art Survey for IoT Effects on Smart City Technology: Challenges, Opportunities, and Solutions [DOI]
  59. 59 A Survey of Optical Fiber Communications: Challenges and Processing Time Influences [DOI]
  60. 60 A Survey of Data Mining Implementation in Smart City Applications [DOI]
  61. 61 A Comprehensive Survey of 5G mm-Wave Technology Design Challenges [DOI]
  62. 62 Comprehensive Survey for Cloud Computing Based Nature-Inspired Algorithms Optimization Scheduling [DOI]
  63. 63 A State of Art Survey for Intelligent Energy Monitoring Systems [DOI]
  64. 64 Clustering Documents based on Semantic Similarity using HAC and K-Mean Algorithms [DOI]
  65. 65 Efficiency of Semantic Web Implementation on Cloud Computing: A Review [DOI]
  66. 66 Efficiency of Malware Detection in Android System: A Survey [DOI]
  67. 67 A Comprehensive Study of Kernel (Issues and Concepts) in Different Operating Systems [DOI]
  68. 68 Neural Networks Architectures Design, and Applications: A Review [DOI]
  69. 69 Deep Learning Approaches for Intrusion Detection [DOI]
  70. 70 A Review of Security Awareness Approaches With Special Emphasis on Gamification [DOI]
  71. 71 Review on Natural Language Processing Based on Different Techniques [DOI]
  72. 72 Web Server Performance Improvement Using Dynamic Load Balancing Techniques: A Review [DOI]
  73. 73 Effects of Parallel Processing Implementation on Balanced Load-Division Depending on Distributed Memory Systems [DOI]
  74. 74 A State of Art for Survey of Combined Iris and Fingerprint Recognition Systems [DOI]
  75. 75 Reliable Communications for Vehicular Networks [DOI]
  76. 76 Smart Android Graphical Password Strategy: A Review [DOI]
  77. 77 Paralinguistic Speech Processing: An Overview [DOI]
  78. 78 Encoding Query Based Lightweight Algorithm for Preventing SQL injection attack
  79. 79 International Journal of Innovation, Creativity and Change [DOI]
  80. 80 International Journal on Computer Science and Engineering [DOI]
  81. 81 International Journal of Computing and Digital Systems [DOI]

Cited by 62

A Systematic Review of Sql Injection and Modern Injection Attacks in Web Applications: Detection and Prevention Perspectives

Yahya Al-Ashmoery, Youness Chaabi, B. Al-Fuhaidi · 2026 International Conference on Digital Transformation, Innovation & Sustainable Development (DTISD) · 2026

A Systematic Assessment of SQL Injection Prevention Mechanisms

Parvathala Balakesavareddy, S. Ramasubbareddy, S. Remya · 2025 1st International Conference on Advancement in Futuristic Technologies (ICAFT) · 2025

Contextual Embedding and Deep Neural Network Pipeline for Robust SQL Injection Detection and Categorization

Ibrahim El Bitar, Razan El Mais, Mohamad Raad · 2025 IEEE International Conference on Emerging Trends in Engineering and Computing (ETECOM) · 2025

Optimized Detection of SQL Injection Attacks Using Machine Learning: Enhancing Accuracy and Explainability in Cybersecurity

W. AlZoubi, Sanaa Mohsin, A. M. Hashim · 2025 International Conference on Cybersecurity and AI-Based Systems (Cyber-AI) · 2025

Integrating CVSS, OWASP, and APPI for a Comprehensive Risk Analysis of SQL Injection Vulnerabilities in E-Commerce

M. Adrian, P. Ibnugraha, Hilal H. Nuha · Intechno Journal (Information Technology Journal) · 2025

The Implications for a Hybrid Detection Technique Against Malicious SQL Attacks on Web Applications

Sarajaldeen Akram Bahjat Arif · Journal of Information Systems Engineering & Management · 2025

Malicious Query Recognition Using Chosen Machine Learning Techniques

C. Y. Daramola, S. Akinpelu, Ezekiel Olajuwon Akinyemi · SN Computer Science · 2025

Comprehensive Data Access Protection Suite

Anand Tagde, Pranjali Jibhakate, Yami Pimpalikar · 2025 International Conference on Computational, Communication and Information Technology (ICCCIT) · 2025

Detecting Security Vulnerabilities in Web Applications: A Proposed System

Ayman Emadeddin Hafez, M. Almustafa · International Journal of Safety and Security Engineering · 2024

Collaborative Detection of SQL Injection Attacks using SIEM, Multi-Wazuh Agents, and Diverse Web Application Firewalls

Mustaghfir Naufal Zaidan, Parman Sukarno, Aulia Arif Wardana · 2024 5th International Conference on Communications, Information, Electronic and Energy Systems (CIEES) · 2024

Showing 47 of 62 known citations — external sources report more than can currently be individually listed.

Related research

Article metrics

Real usage data collected on this platform.

96

Page views

0

PDF downloads

15

Outbound clicks

62

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.