{"id":2547,"date":"2014-08-25T22:05:24","date_gmt":"2014-08-26T02:05:24","guid":{"rendered":"http:\/\/sqlity.net\/en\/?p=2547"},"modified":"2014-11-26T18:16:03","modified_gmt":"2014-11-26T23:16:03","slug":"sql-injection","status":"publish","type":"post","link":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/","title":{"rendered":"Common Database Vulnerabilities: SQL Injection"},"content":{"rendered":"
\n

\nHold on - before you skip this article because you think you already know everything that there is to know about SQL Injection, ask yourself why there is so much to read about SQL Injection.\n<\/p>\n

SQL Injection \u2013 The Most Written About SQL Vulnerability<\/h3>\n
\n\"SQL<\/a> <\/div>\n

\nMany people have heard about SQL Injection. Many people talk about SQL Injection. Many people write about SQL Injection. And yet, many people have SQL Injection vulnerabilities in their installations.\n<\/p>\n

\nIn fact, for several years now, injection vulnerabilities (which include SQL Injection vulnerabilities) have been the leading web-application vulnerability, according to the Open Web Application Security Project (OWASP) that regularly compiles web application vulnerability reports<\/a>.\n<\/p>\n

\nAlthough web applications are probably the most common form of application nowadays, they are not the only applications. If you are using another form of application, you are not safe from SQL Injection either. In fact, any application that takes user input and accesses a database is at risk.\n<\/p>\n

SQL Injection Protection<\/h3>\n

\nIn theory, it is a simple feat to protect from this massive threat: Sanitize all User Input!\n<\/p>\n

\nHowever, in practice it is easy to get wrong.\n<\/p>\n

\nA common way to introduce this kind of vulnerability is to follow wrong advice. For example, using SQL stored procedures to protect from SQL Injection is one advice you often find online - it is wrong (incomplete) and therefore dangerous.\n<\/p>\n

\nBut even if you are following only good advice, there are still many traps. For example, how many forms of user input can you think of? All forms of user input could lead to SQL Injection vulnerabilities. You have the standard web form that takes user supplied values to build queries accessing the database. However, there are also more subtle forms of user-supplied values. In the case of a web application for example, you do not only have to sanitize values that the user can type in, you also need to sanitize values that come from a drop down (or any form of selectable pre-valued input) as it is easy to manipulate those values in the browser. You even have to sanitize things like cookies and the \"User Agent\" value if your application is using them.\n<\/p>\n

\nIf you have a desktop application, the same rules apply. Any field that the user can type in directly needs to be sanitized. But, you also need to pay attention to other input channels. For example, if the application has a settings file, values you read from there need to be sanitized too, before they are used to build database queries.\n<\/p>\n

SQL Injection Prophylaxis<\/h3>\n

\nBecause this type of vulnerability is so easy to create, it is important that the entire development staff is not only aware of the SQL Injection problem, but really understands the underlying causes and the different options an attacker has to exploit this type of vulnerability. SQL Injection training should be mandatory to everyone that can \"touch\" the code.\n<\/p>\n

\nIn addition, it is important to execute regular SQL Injection Audits of your application. A first step is regular peer-to-peer code reviews. You can also install an \"automatic\" vulnerability scanner in the build process. One simple and effective way to execute this step is to hire an expert to do a SQL Injection Audit of your application.\n<\/p>\n

The Most Common Database Problems<\/h3>\n

\nSQL Injection is one of the most commonly encountered database vulnerabilities. In this series of posts, I discuss 10 of them. Below are the ones that are published so far:\n<\/p>\n

\n
\n

Common Database Vulnerabilities: Privilege Abuse<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: SQL Injection<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Unprotected Network<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Inadequate Patch Management<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Backup Data Exposure<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Missing Segregation<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Flawed Key Management<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Weak Audit Trail<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Data Inference<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Defects<\/a><\/h2>\n
<\/div>\n<\/div>\n<\/div>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"

You might think you know everything about SQL Injection. Many people think so. But, do you really understand every nuance? Find out if you do and discover why SQL Injection vulnerabilities are still so common.<\/p>\n

[more…]<\/a><\/p>\n","protected":false},"author":3,"featured_media":2548,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[222,5,34,27,39],"tags":[38,274,15,112],"class_list":["post-2547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-common-database-vulnerabilities","category-general","category-security","category-series","category-sql-injection","tag-security-2","tag-sql-injection","tag-sql-server","tag-vulnerability"],"acf":[],"yoast_head":"\nCommon Database Vulnerabilities: SQL Injection - sqlity.net<\/title>\n<meta name=\"description\" content=\"You might think you know everything about SQL Injection. But, do you really? Find out if you do and why SQL Injection vulnerabilities are still so common.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sqlity.net\/en\/2547\/sql-injection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Common Database Vulnerabilities: SQL Injection - sqlity.net\" \/>\n<meta property=\"og:description\" content=\"You might think you know everything about SQL Injection. But, do you really? Find out if you do and why SQL Injection vulnerabilities are still so common.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sqlity.net\/en\/2547\/sql-injection\/\" \/>\n<meta property=\"og:site_name\" content=\"sqlity.net\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sqlity.net\" \/>\n<meta property=\"article:published_time\" content=\"2014-08-26T02:05:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-11-26T23:16:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"450\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sebastian Meine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sqlity\" \/>\n<meta name=\"twitter:site\" content=\"@sqlity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sebastian Meine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/\"},\"author\":{\"name\":\"Sebastian Meine\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\"},\"headline\":\"Common Database Vulnerabilities: SQL Injection\",\"datePublished\":\"2014-08-26T02:05:24+00:00\",\"dateModified\":\"2014-11-26T23:16:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/\"},\"wordCount\":612,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/SQL_Injection.jpg\",\"keywords\":[\"security\",\"SQL Injection\",\"SQL Server\",\"vulnerability\"],\"articleSection\":[\"Common Database Vulnerabilities\",\"General\",\"Security\",\"Series\",\"SQL Injection\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/\",\"url\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/\",\"name\":\"Common Database Vulnerabilities: SQL Injection - sqlity.net\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/SQL_Injection.jpg\",\"datePublished\":\"2014-08-26T02:05:24+00:00\",\"dateModified\":\"2014-11-26T23:16:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\"},\"description\":\"You might think you know everything about SQL Injection. But, do you really? Find out if you do and why SQL Injection vulnerabilities are still so common.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/SQL_Injection.jpg\",\"contentUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/SQL_Injection.jpg\",\"width\":450,\"height\":450,\"caption\":\"SQL Injection\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2547\\\/sql-injection\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sqlity.net\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Common Database Vulnerabilities: SQL Injection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/sqlity.net\\\/en\\\/\",\"name\":\"sqlity.net\",\"description\":\"Quality for SQL\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sqlity.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\",\"name\":\"Sebastian Meine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"caption\":\"Sebastian Meine\"},\"sameAs\":[\"http:\\\/\\\/sqlity.net\",\"https:\\\/\\\/x.com\\\/sqlity\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Common Database Vulnerabilities: SQL Injection - sqlity.net","description":"You might think you know everything about SQL Injection. But, do you really? Find out if you do and why SQL Injection vulnerabilities are still so common.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/","og_locale":"en_US","og_type":"article","og_title":"Common Database Vulnerabilities: SQL Injection - sqlity.net","og_description":"You might think you know everything about SQL Injection. But, do you really? Find out if you do and why SQL Injection vulnerabilities are still so common.","og_url":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/","og_site_name":"sqlity.net","article_publisher":"https:\/\/www.facebook.com\/sqlity.net","article_published_time":"2014-08-26T02:05:24+00:00","article_modified_time":"2014-11-26T23:16:03+00:00","og_image":[{"width":450,"height":450,"url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg","type":"image\/jpeg"}],"author":"Sebastian Meine","twitter_card":"summary_large_image","twitter_creator":"@sqlity","twitter_site":"@sqlity","twitter_misc":{"Written by":"Sebastian Meine","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#article","isPartOf":{"@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/"},"author":{"name":"Sebastian Meine","@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c"},"headline":"Common Database Vulnerabilities: SQL Injection","datePublished":"2014-08-26T02:05:24+00:00","dateModified":"2014-11-26T23:16:03+00:00","mainEntityOfPage":{"@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/"},"wordCount":612,"commentCount":1,"image":{"@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg","keywords":["security","SQL Injection","SQL Server","vulnerability"],"articleSection":["Common Database Vulnerabilities","General","Security","Series","SQL Injection"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/sqlity.net\/en\/2547\/sql-injection\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/","url":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/","name":"Common Database Vulnerabilities: SQL Injection - sqlity.net","isPartOf":{"@id":"https:\/\/sqlity.net\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#primaryimage"},"image":{"@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#primaryimage"},"thumbnailUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg","datePublished":"2014-08-26T02:05:24+00:00","dateModified":"2014-11-26T23:16:03+00:00","author":{"@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c"},"description":"You might think you know everything about SQL Injection. But, do you really? Find out if you do and why SQL Injection vulnerabilities are still so common.","breadcrumb":{"@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sqlity.net\/en\/2547\/sql-injection\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#primaryimage","url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg","contentUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg","width":450,"height":450,"caption":"SQL Injection"},{"@type":"BreadcrumbList","@id":"https:\/\/sqlity.net\/en\/2547\/sql-injection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sqlity.net\/en\/"},{"@type":"ListItem","position":2,"name":"Common Database Vulnerabilities: SQL Injection"}]},{"@type":"WebSite","@id":"https:\/\/sqlity.net\/en\/#website","url":"https:\/\/sqlity.net\/en\/","name":"sqlity.net","description":"Quality for SQL","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sqlity.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c","name":"Sebastian Meine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","caption":"Sebastian Meine"},"sameAs":["http:\/\/sqlity.net","https:\/\/x.com\/sqlity"]}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/SQL_Injection.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2wXuw-F5","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts\/2547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/comments?post=2547"}],"version-history":[{"count":0,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts\/2547\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/media\/2548"}],"wp:attachment":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/media?parent=2547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/categories?post=2547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/tags?post=2547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}