SQL Injection Prevention

SQL injection is a method for breaking into a website database by inputting character strings into a text area or text field on your site which causes the database to behave differently when it attempts to process it. Insty-Site protects websites from being subjected to SQL injection attempts which may cause errors or allow malicious users into areas of your website where authorization should not be permitted.

The Back-Office
The back-office is secured only to users with admin privileges. Permission to each function is individually set and checked when executing a function in the back-office. In addition, scripts housed in sub-directories of the back-office will not execute for non-admin users attempting to directly post to them.

The Front Site
The front side of the website will strip any and all potentially offensive characters from the query string of any URL. In addition, Insty-Site has numerous server-level protections against a variety of injection and hacking methods.

Back to Table of Contents