Eclipse plugin for analyzing embedded SQL queries in PHP programs
نویسنده
چکیده
During code development it is crucial to get fast feedback about the correctness of our code. Various hints are given by compiler through warnings and error messages that are displayed in the IDE, e.g. Eclipse. Unfortunately, this covers only the general host-language, in which we write the code. Often we need to use another language to communicate with a specific application domain: e.g. SQL for sending queries to a database engine. By default these SQL strings are not checked statically, although it would be highly beneficial. Alvor is a tool that statically checks SQL queries in Java programs. This thesis presents an extension for Alvor to add PHP support. The key challenge when adapting Alvor to PHP was the dynamic nature of PHP. The solution is therefore limited to operate only within the scope of a PHP function or a PHP script. We evaluated the tool on open-source software and the results showed that it would be most beneficial to use it as a tool to support beginners in learning programming.
منابع مشابه
1 Sound and Precise Analysis of Web Applications for Injection Vulnerabilities ∗
Web applications are popular targets of security attacks. One common type of such attacks is SQL injection, where an attacker exploits faulty application code to execute maliciously crafted database queries. Both static and dynamic approaches have been proposed to detect or prevent SQL injections; while dynamic approaches provide protection for deployed software, static approaches can detect po...
متن کاملAn Approach to Detection of SQL Injection Attack Based on Dynamic Query Matching
A large number of web applications, especially those deployed by companies for e-business operations involve high reliability, efficiency and confidentiality. Such applications are often written in script languages like PHP embedded in HTML, allowing establishing connection to databases, retrieving data, and putting them in the Web. One of the most common in web application attacks is SQL Injec...
متن کاملComparative Analysis of Relational and Non-relational Database Models for Simple Queries in a Web-based Application
This research investigates, provides empirical evidence and conducts a comparative study among relational and non-relational databases involving simple queries in a web-based application. Our testbed is a simple recipe recommendation system (MyRef) which (ideally) uses left-over foods in the refrigerator. For comparative analysis, the system is implemented using relational, XML and JSON databas...
متن کاملAn Approach to Detection of SQL Injection Vulnerabilities Based on Dynamic Query Matching
Web is one of the most popular internet services in today’s world. In today’s world, web servers and web based applications are the popular corporate applications and become the targets of the attackers. A Large number of Web applications, especially those deployed for companies to ebusiness operation involve high reliability, efficiency and confidentiality. Such applications are written in scr...
متن کاملSQL Application for Periodic System of Elements
The paper presents SQL power of periodic system using for didactic aim. The article is based on a PHP application developed to present a periodic system in a form, which can be used for answer at different questions, which can be asked related at the structure of elements. There are presented all queries that are needed to be use for classification of elements after different properties, the da...
متن کامل