SQL Injection Attacks Increasing

An anonymous reader writes "Help Net Security has a story that covers the dramatic increase in the number of hacker attacks attempted against its banking, credit union and utility clients in the past three months using SQL Injection." Article follows up on press release with a little more information. Not a lot here shockingly surprising, but it's worth mentioning that SQL injection is a real pain for web developers. You have to be very careful about checking user input.

Comments

Re:How difficult is it.

[eggoeater]

Yes, but most SQL injection attacks happen via text boxes which gets put into a String type. What the parent is suggesting is recasting them into numbers (e.g. SSN, account number, etc) or date/time.
If the user is entering a name or password, then you have to manually screen the input for bad data.

Re:Qualifications

[tbannist]

And look at the quality of today's politicans...