SQL Injection Simulation Project

=============================================

Purpose

This project will create a simple web application to simulate SQL Injection attack. This attack pattern is one of the most famous Application level attacks. So we can reduce the risk or avoid this attack happening through optimizing our application code.

Tools

Used Eclipse and MySQL

Architecture

Setting up 3 layers: UI, Logical, and DB

Example

1. Original page
   
2. Test case 1 (without protection)
   
3. Test case 2 (without protection)(password is the same to user name)
   
4. Test case 3(without protection)
   
5. Test case 5 (repeat 3 with protection)
   
6. Test case 6 (repeat 2 with protection)
   
7. Test case 7(repeat 4 with protection)
   
8. Test case 8(Common user login)
   

Notes

1. In others folder, the related MySQL code is located there.
2. If anyone wants to try this project code, the API of MySQL DB should be modified by the file: WebContent/META-INF/context.xml.
3. This project needs to run on the Web Server Tomcat.