摘要
随着Web应用程序的普及,基于B/S架构模式的网络应用程序仍存在SQL注入攻击的安全问题,文章分析了SQL注入攻击的原理,在基于Python的flask框架上搭建Web服务器,模拟SQL注入攻击及使用Python内置模块进行防御测试研究,分析内部防御策略,并给出SQL注入攻击防范方法,最后探讨SQL注入后数据库数据如何恢复。以此来为网络开发者提供更好的防范SQL注入的方法和思路。
With the popularity of Web applications,network applications based on B/S architecture mode still have security problems of SQL injection attacks.This paper will analyze the principle of SQL injection attacks and build a Web server on the flask framework based on Python.Simulate SQL injection attack and use Python built-in module to conduct defense test research,analyze internal defense strategy,and give SQL injection attack prevention methods,and finally discuss how to recover database data after SQL injection.So that provide the network developers with better methods and ideas to prevent SQL injection.
作者
牛鸿伟
NIU Hongwei(Chongqing Normal University,Chongqing 401331,China)
出处
《现代信息科技》
2021年第21期146-148,共3页
Modern Information Technology
关键词
SQL注入攻击
防御测试
防范方法
恢复
SQL injection attack
defense test
prevention method
recovery
