摘要
在Web系统中,SQL注入是一种经常出现的漏洞。攻击者利用此漏洞通过SQL语句对数据库进行直接地访问,严重威胁系统安全。本文由SQL注入原理着手,对产生SQL注入原因以及常见的SQL注入攻击方式进行了探究,并提出有效防范SQL注入攻击的对策,旨在为一些Web应用在防注入方面提供指导和帮助。
SQL injection is a common loophole in Web system, the attacker can directly access database through the SQL statement, using this loophole, which caused seriously hidden trouble of safety. This paper analyzed the principle of SQL injection firstly, and then made exploration on SQL injection reasons and common ways of SQL injection attacks, finally, put forward the countermeasures to SQL injection attack,so as to provide guidance for SQL injection prevention in Web applications system.
出处
《价值工程》
2013年第7期211-212,共2页
Value Engineering
关键词
SQL注入
原理
防范
SQL injection
principle
prevention
