 |
|
Innovation award
Nominee: 1x |
This package can be used to analyse HTTP requests to detect security attacks.
The main class analyzes the HTTP GET and POST values to determine if contains words that can be used to perform SQL injection attacks, mainly to MySQL applications.
It returns the information that based on a score of the word analysis it may be a security attack, so the applications avoid handling the request.
Another class can generate log files in XML format with more details about the eventual attack.
April 2010
Number 5
Prize: One book of choice by Apress |
SQL injection security attacks consist in passing parameters to applications in such way that makes them execute database queries that may alter the application behavior in a way that can be exploited by the attacker.
This class implements one way to detect and avoid eventual SQL injection attacks by analyzing HTTP request parameters to determine if they contain sequences intended for performing this type of attacks.
Manuel Lemos |
| Ratings | Utility |
Consistency |
Documentation |
Examples |
Tests |
Videos |
Overall |
Rank |
| All time: |
Sufficient (65.0%) |
Sufficient (75.0%) |
Sufficient (65.0%) |
Sufficient (75.0%) |
- |
- |
Not sure (54.0%) |
1239 |
| Month: |
Not yet rated by the users |
| |
Applications that use this class |
|
|
No application links were specified for this class.
If you know an application of this package, send a message to the
author to add a link here.
| |
 Files |
|
|
Stumble It!
Bookmark in del.icio.us
Support forum (3)
Blog
Latest changes
Browse all classes by 
User ratings
Files
index.html
