PHP网站设计中SQL注入的安全防御  

Security Defense for SQL Injection in PHP Website Design

作　　者：韩林利 魏宁[2] 

机构地区：[1]盱眙县生产力促进中心,江苏盱眙211700 [2]淮安市科技局,江苏淮安223001

出　　处：《淮阴工学院学报》2014年第5期47-52,共6页Journal of Huaiyin Institute of Technology

摘　　要：动态网站中数据库的安全占有非常重要的地位,严重时会导致网站崩溃,而SQL注入是破坏数据库数据,导致网站异常的一种常用方法。针对各种SQL注入的方式,深入研究其产生原理,对当前的SQL注入方式做了改进,并提出并提出了PHP动态网站上一些防范SQL注入的技术。Database security is very important in dynamic websites design, which may lead to serious break-down .SQL injection is one of most common method to destroy the data in database causing the website to excep-tion.Some principles of SQL injection were discussed deeply in this paper.A variety of SQL injections were im-proved to test on the testing PHP website and some dynamic PHP SQL injection prevention techniques were pro-posed.

关 键 词：SQL注入 数据库安全 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]