Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

SQL injection attacks problem


  • Please log in to reply
2 replies to this topic

#1 david1601

david1601

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:57 PM

Posted 07 September 2026 - 03:32 PM

It seems my website is under attack from an SQL injection. 

How can I make it stop?

They are using a 'GET" statement fortunately and not a "DELETE" or "EDIT" statement. 

 

Is there a way to get rid of the injection or fool it to stop hitting the database?

 

Would duplicating the database and renaming the new one then changing all my connection codes work?

The delete the old database so they are not hitting the actual database.

 

I can't block the IP Address as they are using many of them.

 

Thanks



BC AdBot (Login to Remove)

 


#2 aldfort

aldfort

  •  Avatar image
  • Moderator
  • 3,972 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cardiff, Wales, UK
  • Local time:12:57 AM

Posted 08 September 2026 - 05:17 AM

This might help SQL Injection Prevention - OWASP Cheat Sheet Series



#3 SamHobbs

SamHobbs

  •  Avatar image
  • Members
  • 85 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 10 September 2026 - 08:43 PM

The vulnerability is in your application code, not in the database name. Attackers exploiting a SQL injection flaw are not targeting a specific database by name; they are exploiting how your code constructs SQL queries from user input. I hope you are modifying your code as described in the article linked to previously.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users