Knowledge Base
 Up to 70% off  on  WordPress  hosting for WordPress Websites and Stores!

Database Vulnerability: SQL Injection


What is it?

SQL injection is an extremely damaging attack in which hackers will attempt to access information stored in your databases, such as customer data or user IDs and passwords. SQL stands for Structured Query Language and is the programming language understood by databases. By inserting commands from this programming language into fields on your website's input forms, hackers can gain access to the database records of vulnerable sites, stealing credit card data, passwords, e-mail addresses, and any additional data available in the database.

What is the impact?

The impacts of this type of attack can be devastating. Having stolen client information from a compromised website can be hard to recover from and possibly expensive depending on the information stolen. It will also badly damage your company's reputation by exposing your customers' private data to criminals.

How does SiteLock protect me?

SiteLock's patent-pending 360-degree scan technology tests each input box on your website to ensure that they are not vulnerable to this type of attack. We verify the safety of each input box on your website by inserting code in the way hackers would. We do not read or collect any data, however. We use safe test procedures and code,  and if we discover a vulnerability in our testing, we report it to you immediately. Our Expert Services team can also help you remove these issues from your site.

What can I do about it?

Make sure any applications you use are kept up-to-date and limit the use of third-party plug-ins where possible, as they can be a source of many issues and may be updated less frequently or created by unscrupulous publishers. Use a website scanning service that includes SQL injection scans, such as SiteLock. If you are writing your own code, be sure to validate your input fields for special characters and ensure you are checking for this type of hacking in your database procedures called from the website.

As a Bluehost customer, receive up to 80% off the retail price of SiteLock's products.

If you need further assistance, feel free to contact us via Chat or Phone:

  • Chat Support - While on our website, you should see a CHAT bubble in the bottom right-hand corner of the page. Click anywhere on the bubble to begin a chat session.
  • Phone Support -
    • US: 888-401-4678
    • International: +1 801-765-9400

You may also refer to our Knowledge Base articles to help answer common questions and guide you through various setup, configuration, and troubleshooting steps.

Did you find this article helpful?

* Your feedback is too short