Logo Questions Linux Laravel Mysql Ubuntu Git Menu
HTML CSS JAVASCRIPT SQL PYTHON PHP BOOTSTRAP JAVA JQUERY R React Kotlin
 

RegEx to Detect SQL Injection

Tags:

regex

sql

sql-injection

Is there a Regular Expression that can detect SQL in a string? Does anyone have a sample of something that they have used before to share?

like image 379
JC Grubbs Avatar asked Sep 05 '08 02:09

JC Grubbs

1 Answers

Don't do it. You're practically guaranteed to fail. Use PreparedStatement (or its equivalent) instead.

like image 80
Hank Gay Avatar answered Oct 06 '22 19:10

Hank Gay
Sign in to Comment

Related questions

How to convert Float to Varchar in SQL
Spring Data JPA Java - get Last 10 records from query
Mending bad BAD database design once data is in the system
Using a 'case when' in a Doctrine select statement
SQLServer - How to find dependent tables on my table?
mysql table name length limit? - please test on default mysql (asked in 2010 for mysql <5.5)
SQL Server is not numeric and not null
SQL When to create a new database?
Performance issue in using SELECT *? [duplicate]
Get the first letter of each word in a SQL string [duplicate]
Why are positional queries bad?
How to resolve Oracle error ORA-01790?
new and old trigger code
VARCHAR max in laravel 5
EASY way to refresh ListBox in WPF?
Use of 1=2 in a SQL query
Why we can't have more than one primary key?
Oracle SQL to change column type from number to varchar2 while it contains data
Rails SQL Query with find
Counting the number of occurrences of a character in Oracle SQL [closed]

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!