SQL Injection Teaching Based on SQLi-labs
Ping Chen, Jinshuang Wang, Yang Lanjuan, Pan Lin · 2020
SQL injection attack is one of the most common methods of hacker attack, which is very harmful. In the course of information system security in our school, SQL injection attack and prevention is one of the most important and difficult contents in teaching. SQLi-labs is a teaching assistant software with various SQL injection vulnerabilities. With the help of this software, teacher can carry out SQL injection attacks in class, which help students better master the principle of SQL injection attack and prevention. This paper takes Union SQL injection as an example to introduce the teaching implementation process based on SQLi-labs. Teaching practice shows that this teaching mode increases the interest of students' learning and achieves good learning effect.