{"id":371,"date":"2022-10-13T11:35:13","date_gmt":"2022-10-13T11:35:13","guid":{"rendered":"https:\/\/cwatch.comodo.com\/blog\/?p=371"},"modified":"2022-10-13T12:58:05","modified_gmt":"2022-10-13T12:58:05","slug":"what-is-an-sql-injection-sqli","status":"publish","type":"post","link":"https:\/\/cwatch.comodo.com\/blog\/website-security\/what-is-an-sql-injection-sqli\/","title":{"rendered":"What is SQL Injection (SQLI)?"},"content":{"rendered":"
\n

What is SQL Injection Attack?<\/h2>\n

SQL Injection (SQLI)<\/strong> is a backend database method used by hackers to take control of a web application by injecting malicious SQL codes. SQLI attacks are becoming very widespread because they are easy to do and require very little technical knowledge to perform. SQLI is a web application server issue that most developers are unaware of.<\/p>\n

SQL Injection Types:<\/h2>\n

Hackers insert malicious SQL codes using different methods which include retrieving data in form<\/a> of errors, conditions, and time. Let\u00e2\u20ac\u2122s take a detailed look at the SQL Injection types:<\/p>\n

\n
    \n<\/p>\n
    \n<\/p>\n
    \n
  1. Error Based SQL Injection<\/li>\n<\/div>\n<\/div>\n
    \n<\/p>\n
    \n
  2. SQL Injection Based on Boolean Errors<\/li>\n<\/div>\n<\/div>\n
    \n<\/p>\n
    \n
  3. SQL Injection is done through Time Based Query<\/li>\n<\/div>\n<\/div>\n<\/ol>\n<\/div>\n

    1. Error Based SQL Injection:<\/strong><\/h3>\n

    In this method hackers can easily fetch details such as table names and content from visible database errors and this could be identified easily by hackers on the production servers. The best method here is to avoid displaying database error messages which in turn prevents hackers from fetching that information.<\/p>\n

    2. SQL Injection Based on Boolean Errors:<\/strong><\/h3>\n

    In a few cases, the error message is not displayed on a page when an SQL Query fails which makes it difficult for the hackers to gain entry into the vulnerable application. But there is still a way for hackers to find information. Whenever an SQL query fails some parts of the webpage seem to disappear or the whole website will fail to load.<\/p>\n

    \n
    \n\"SQL
    \n
    \n\n<\/div>\n

    On confirmation of these notifications the hacker inserts a false condition into the SQL query to test the vulnerability level of the application and the proximity of data extraction.<\/p>\n

    Example:<\/strong>
    \nhttps:\/\/xyz.com\/index.php?id=1+AND+1=1<\/strong><\/p>\n

    After inserting this query if the website loads normally then it indicates that it is vulnerable to an SQL injection<\/a><\/strong>. To confirm this suspicion, the hacker would put a wrong query:<\/p>\n

    https:\/\/xyz.com\/index.php?id=1+AND+1=2<\/strong><\/p>\n

    As this condition is false and if the webpage does not work as usual it shows that the webpage is vulnerable to SQL Injection attack.<\/p>\n

    3. SQL Injection is done through Time Based Query:<\/strong><\/h3>\n

    In many cases, the Vulnerable SQL queries would be displayed visually on a web page but can be still easy to find out. Hackers here instruct the database to wait for a certain period before responding. If the site denies this and loads without any pause it means that they are not vulnerable. The SQL query implemented here would be similar to Boolean Attack but would have a sleep function in the query. For example, if the sleep time is 5 seconds then it instructs the database to sleep for 5 seconds.<\/p>\n

    Example Query:<\/strong>
    \nhttps:\/\/xya.com\/index.php?id=1+AND+IF(version()+LIKE+\u00e2\u20ac\u21228%\u00e2\u20ac\u2122,sleep(5),false)<\/p>\n

    Methods to Prevent SQL Query:<\/h2>\n

    False SQL queries entry can be avoided by<\/p>\n

    Locating these  SQL queries in a manual aspect would prove to be costly as there are chances of missing out. Hence, getting website security software<\/a> is a good step.<\/p>\n

    \"website-security\"<\/a><\/p>\n

    Implementing web security<\/a> software helps to validate this issue by having a thorough check on each and every query. Even if a vulnerable query is found it makes sure that the web page is loading properly by hiding the queries from the database.<\/p>\n