A Detailed Evaluation of SQL Injection Attacks, Detection and Prevention Techniques

An SQL Injection attack is a database focused attack for programmes that utilise data. It is accomplished by inserting malicious lines of code into the SQL queryto alter and modify its meaning, allowing the attacker to gain access to the database or retrieve sensitive data. Many strategies for detecting and preventing such assaults have been developed and suggested. This study provides an in depth examination of 38 publications on approaches for detecting SQL Injection in web applications. This offers a foundation for designing and using efficient SQL Injection, detection and prevention techniques.