SQL INJECTION: PROBLEM AND SOLUTION
SQL injection (SQLi) is one of the most common form of web site attack where web
forms are either very common or they are not coded properly. This kind of injection exploit is easy enough to accomplish that even an inexperienced hacker can perform work that can cause harm to any websites. However, if it is done by a very skillful hacker, a web code weakness can unlock, thus someone gain root level access of web servers and from there attacks on other networked servers can be executed .

SQL injection (SQLi) means, an injection attack which is performed by an attacker who can execute cynical SQL statements which is commonly also mention as a malicious „payload’. This malicious „payload’ control a web application‟s database server (also commonly referred to as a Relational Database Management System – RDBMS) [2].
An SQL injection (SQLi) vulnerability when leveraged, at the right circumstances, an attacker can use it to bypass a web application‟s authentication, authorization mechanisms and retrieve the contents of an entire database. SQL injection can also be used to add, modify and delete records in a database, affecting data integrity.

To such an extent, SQL injection can provide an attacker with unauthorized access to sensitive data including, customer data, personal identifiable information (PII), intellectual property and other sensitive information.

The nearly universal language of different kinds of database is known as Structured Query Language (SQL) which allows the storage, manipulation, and retrieval of data. Databases that use SQL include MS SQL Server, MySQL, Oracle, Access and Filemaker Pro. As these databases are equally prime for SQL Injection attack.

Web based forms must allow some access to your database to allow entry of data and a response, so this kind of attack bypasses firewalls and endpoint defenses. Any web form, even a simple logon form or search box, might provide access to your data by means of SQL injection if coded incorrectly.