Testing Web Applications for SQL Injection

This paper discusses the SQL injection vulnerability, its impact on Web applications, methods for predeployment and post-deployment testing of the application, and solution implementation suggestions. SQL injection is one of many parameter manipulation attacks that can be executed against Web applications. The SQL injection vulnerability is easily identified and prevented in most systems, but often is not.