Techniques to prevent SQL injection and cross-site scripting

ТАТУ хабарлари · 2024-yil

Annotatsiya

The article discusses a method for preventing SQL injections and cross-site scripting using the Knuth-Morris-Pratt string matching algorithm.SQL injection and cross-site scripting remain a major threat to data-driven web applications.There are more and more cases where hackers gain unlimited access to the internal database of web applications in order to steal, edit and destroy confidential data.Therefore, measures must be taken to curb the growing threats of SQL injection and XSS attacks.This study presents a technique to detect and prevent these threats using the Knuth-Morris-Pratt string matching algorithm.The algorithm was used to match the user's input string with a stored injection string pattern to detect any malicious code.The implementation was carried out using the PHP scripting language and the Apache XAMPP server.The security level of the method was measured using various test cases of SQL injection, cross-site scripting (XSS), and code injection attacks.The results obtained showed that the proposed technique is able to successfully detect and prevent attacks, register an attack record in the database, block the system by its mac address, and also generate a warning message.Thus, the proposed technique turned out to be more effective in detecting and preventing SQL injections and XSS attacks.

Maqola ma’lumotlari
JurnalТАТУ хабарлари
NashriyotТошкент ахборот технологиялари университети
ISSN2010-9857, 2181-1083
Nashr sanasi2024-02-14
TilIngliz
Ilmiy sohaTexnika
DOI10.61663/241tuitmct2
Indeksga qo‘shilgan2026-09-02

Ilmiy soha

Iqtibos keltirish

APANoma’lum muallif (2024). TECHNIQUES TO PREVENT SQL INJECTION AND CROSS-SITE SCRIPTING. ТАТУ хабарлари. https://doi.org/10.61663/241tuitmct2
GOST (OAK)Noma’lum muallif TECHNIQUES TO PREVENT SQL INJECTION AND CROSS-SITE SCRIPTING // ТАТУ хабарлари. – 2024. – DOI: 10.61663/241tuitmct2.
MLANoma’lum muallif. “TECHNIQUES TO PREVENT SQL INJECTION AND CROSS-SITE SCRIPTING.” ТАТУ хабарлари, 2024. https://doi.org/10.61663/241tuitmct2
ChicagoNoma’lum muallif. “TECHNIQUES TO PREVENT SQL INJECTION AND CROSS-SITE SCRIPTING.” ТАТУ хабарлари (2024). https://doi.org/10.61663/241tuitmct2
HarvardNoma’lum muallif (2024) ‘TECHNIQUES TO PREVENT SQL INJECTION AND CROSS-SITE SCRIPTING’, ТАТУ хабарлари. https://doi.org/10.61663/241tuitmct2
BibTeX
@article{article2024,
  title = {TECHNIQUES TO PREVENT SQL INJECTION AND CROSS-SITE SCRIPTING},
  author = {Unknown},
  journal = {ТАТУ хабарлари},
  year = {2024},
  doi = {10.61663/241tuitmct2},
  url = {https://doi.org/10.61663/241tuitmct2}
}

Boshqa maqola uchun iqtibos tayyorlash

ТАТУ хабарлари jurnalidan boshqa maqolalar

ТАТУ хабарлари — barcha maqolalar · 2024-yil arxivi

Texnika sohasidagi boshqa maqolalar

Texnika sohasidagi OAK jurnallari