Blog

An injection attack is the most commonly used method of attack by hackers when trying to access data. The first thing you should do is assume that all data that will be entered is malicious in nature. By starting here, you can build all the necessary checks and filters to prevent these types of attacks. For example, with an SQL injection, you can use input validation functions to prevent incorrect characters from being passed and only allow characters associated with the input type e.g. email, to be passed. Other things to do would include not allowing for the use of dynamic SQL as you are handing power over to the input variables. Many databases and OS constantly require security patches and so having a patch management process in place can often be crucial. Don’t forget, always keep your database credentials separate and encrypted.