Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{146963,
        author = {Shivraj Sharma},
        title = {A Novel Approach to Foil SQL Injection Attack at Login Phase},
        journal = {International Journal of Innovative Research in Technology},
        year = {},
        volume = {5},
        number = {2},
        pages = {573-580},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=146963},
        abstract = {SQL injection techniques have been recognized as the most exhaustively used security threats for the web applications. According to a survey performed by the Open Web Application Security Project (OWASP) in 2017 SQL Injection is at the first place of the most crucial 10  critical web based application security attacks or risks. A wrongdoer can get unwarranted retrieval of data from or to the database beneath the web application. These attacks have various kinds and the intention to launch a particular attack also differs from the other attack. In order to shield the database from any SQL injection assault the close examination of these SQL queries is necessary. SQL Injection Attacks have been explored at various types of web based applications. However, one thing has been common in all these applications is that the malicious user requires some sort of input method by which he can send the crafted SQL query to the database. In this paper a special case of SQL Injection Attack has been explored in great detail. SQL Injection Attack at login phase is a very general and mostly explored SQL Injection Attack forever. A novel approach to detect and prevent SQL Injection Attack at login phase has been proposed. This approach is a mixture of defensive coding and Secure Hash Algorithm (SHA) based OTP generation process. },
        keywords = {Attack, Injection, SQL, Vulnerability, Tautology, Hash Function },
        month = {},
        }