Design and implementation of database driver for detecting SQL injection
Yuan Ding · Jisuanji gongcheng yu sheji · 2010
In order to detect SQL injection in the web applications,the design of a database driver(called DDriver) is outlined.Via placing a secure database driver between the application and its underlying RDBMS,DDriver can create query ID which is used to judge from injected and legitimate queries.DDriver doesnt’ depend on the application or the RDBMS which can easily fit any application.Via achieving DDriver,ever testing its performance and the overhead caused on the processing time on two RDBMSs.the experiment shows that DDriver can deal with injected and legitimate queries with positive results.