• MITAL PAREKH

Now a day’s cyber-attacks are increasing extremely on web application, mobile apps, networks which are more vulnerable for websites, web application. These attacks are used to gain unauthorized access into the system, data breach, credentials of the legitimate users and then penetrate the system. In vulnerability Assessment and Penetration testing the most vulnerable attack on websites, web application is SQL Injection. SQL Injection is a type of attack in which attacker trying to fetch database by manipulating SQL Queries. SQL Injection is common but the most popular attack in which the attacker intercepts the http request in which SQL query is passed with parameters, so attacker gain the access on SQL database in backend. On the basis of that attacker can find out the database names, table names, columns, and its row data too. This attack is the most vulnerable because attacker attacks on the database of the website and retrieves data from the tables. Authentication bypass, Data Breach, read source code from files on the database server, admin panel access can be done with SQL Injection. In this research paper a mechanism shall be developed which can be helpful to prevent the SQL Injection on the websites, web-apps. SQL injection is hard to prevent, although some solutions in this research paper can be fruitful for providing some better solution to prevent the SQL injection.

SQL Injection, SQL Injection in web app, SQL Injection attack, SQL Injection vulnerability, Methods of SQL Injection attack

"“SQL Injection attack in web application and its mitigation using prevention mechanism to secure Web Application Database” ", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 1, page no.841-845, January-2019, Available :http://www.jetir.org/papers/JETIR1901100.pdf

"“SQL Injection attack in web application and its mitigation using prevention mechanism to secure Web Application Database” ", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 1, page no. pp841-845, January-2019, Available at : http://www.jetir.org/papers/JETIR1901100.pdf