Textual Manipulation for SQL Injection Attacks
Hussein Alnabulsi, Izzat Mahmoud Alsmadi, Mohammad A. Al-Jarrah · International Journal of Computer Network and Information Security · 2013
Abstrac-SQL injection attacks try to use string or text manipulations to access illegally websites and their databases.This is since using some symbols or characters in SQL statements may trick the authentication system to incorrectly allow such SQL statements to be processed or executed.In this paper, we highlighted several examples of such text manipulations that can be successfully used in SQL injection attacks.We evaluated the usage of those strings on several websites and web pages using SNORT open source.We also conducted an extensive comparison study of some relevant papers.