ADVANCED SQL INJECTION TECHNIQUES AND PREVENTION

OVERVIEW

SQL injection remains one of the most critical web application vulnerabilities. This article explores advanced techniques and robust prevention methods.

ATTACK VECTORS

1. CLASSIC SQL INJECTION

CODE_BLOCK // SQL
' OR '1'='1' --

2. BLIND SQL INJECTION

When no error messages are displayed:

CODE_BLOCK // SQL
' AND SUBSTRING((SELECT password FROM users WHERE username='admin'),1,1)='a'--

3. SECOND-ORDER SQL INJECTION

Data stored in database is later used in unsafe SQL query:

CODE_BLOCK // JAVASCRIPT
// First request - store malicious data
username: "admin'--"

// Second request - data used unsafely
SELECT * FROM logs WHERE username = 'admin'--'

PREVENTION STRATEGIES

1. PARAMETERIZED QUERIES

Always use prepared statements:

CODE_BLOCK // JAVASCRIPT
// ❌ VULNERABLE
const query = `SELECT * FROM users WHERE id = ${userId}`;

// ✅ SECURE
const query = 'SELECT * FROM users WHERE id = ?';
db.execute(query, [userId]);

2. INPUT VALIDATION

CODE_BLOCK // JAVASCRIPT
function validateUserId(id) {
  if (!/^\d+$/.test(id)) {
    throw new Error('Invalid user ID');
  }
  return parseInt(id, 10);
}

3. LEAST PRIVILEGE DATABASE ACCESS

• Use separate database users for different operations
• Restrict permissions to minimum required
• Never use root/admin accounts in application code

DETECTION AND MONITORING

Implement WAF rules and monitor for suspicious patterns:

CODE_BLOCK // BASH
# Common SQLi patterns
' OR 1=1
UNION SELECT
; DROP TABLE

CONCLUSION

SQL injection is preventable with proper coding practices. Use parameterized queries, validate inputs, and implement defense in depth.