An Approach of Preventing Code Injection Attack in Web Environment

Abstract: Nearly every web application is developed in a way that the demand of specific data is completed through user input. When dynamic SQL query is used there is a possibility that user may insert malicious code as input in order to have access of sensitive information or unauthorized access of the database [7]. We have developed a new mechanism to prevent SQL injection attack, in this method we have stored some exceptional information in the database which cannot be used in normal case, our application look for such exceptional information, if it is found in accessed data then request is discarded by the web server.

Keywords: SQL Injection, Malicious Code, Attacker, Unauthorized Access