Question

Analyze the techniques that can be used to prevent SQL injection and explain why it is important to be aware of these techniques.

Answer 1

An SQL injection one of the types of injection attacks where maliciously crafted inputs are submitted by an attacker which causes an application to perform an unpredictable action.

It is one of the most common types of attacks on the internet occurring worldwide nowadays.

Techniques which can be used to prevent SQL injection are:

1. Trust no user. Keep in mind that whatever the user enters is evil for you and may hack or crack your code. Proper validation of the data should be there.

2. Do not use dynamic SQL or queries that take input from the user.

3. Apply patches and updates regularly in the application

4. Always use a firewall against attackers.

5. Use appropriate privileges

6. Regularly keep an eye on SQL statements running over an application.

These all are very important for a database administrator to know because data loss is one of the very worst-case scenarios in today's cyber threat era. Data is very valuable to everyone.

So handling the database security and following the above techniques will save data from getting injected by the malicious users.