SQL Injection Attacks and Defense

SQL injection is a technique that exploits security vulnerabilities in a website by inserting malicious code into the database that runs it. Such attacks can be used to deface or disable public websites, spread viruses and other malware, or steal sensitive information such as credit card numbers, Social Security Numbers, or passwords. The only book devoted exclusively to this long-established but recently growing threat, SQL Injection Attacks and Defense, 2e, is the definitive resource for understanding, finding, exploiting, and defending against this increasingly popular and particularly destructive type of Internet-based attack. The First Edition was winner of the Best Book Bejtlich Read Award.