Innovation Award
April 2010
Number 5 |
SQL injection security attacks consist in passing parameters to applications in such way that makes them execute database queries that may alter the application behavior in a way that can be exploited by the attacker.
This class implements one way to detect and avoid eventual SQL injection attacks by analyzing HTTP request parameters to determine if they contain sequences intended for performing this type of attacks.
Manuel Lemos |
This package can be used to analyse HTTP requests to detect security attacks.
The main class analyzes the HTTP GET and POST values to determine if contains words that can be used to perform SQL injection attacks, mainly to MySQL applications.
It returns the information that based on a score of the word analysis it may be a security attack, so the applications avoid handling the request.
Another class can generate log files in XML format with more details about the eventual attack.
No application links were specified for this class.
If you know an application of this package, send a message to the
author to add a link here.
ReTweet
Stumble It!
Bookmark in del.icio.us
Support forum (3)
Blog
Latest changes
Groups
Files
