Data Management

Textual Manipulation for SQL Injection Attacks

Date Added: Nov 2013
Format: PDF

SQL injection attacks try to use string or text manipulations to access illegally websites and their databases. This is since using some symbols or characters in SQL statements may trick the authentication system to incorrectly allow such SQL statements to be processed or executed. In this paper, the authors highlighted several examples of such text manipulations that can be successfully used in SQL injection attacks. They evaluated the usage of those strings on several websites and web pages using SNORT open source.