The free, open source web application firewall called “ModSecurity” (available for Apache, Microsoft IIS, and nginx web servers) is one method that web site owners can use to protect against SQL injection attacks.
In modern web development, databases are often used on the back end of web applications and content management systems – meaning that both the content and behavior of many web sites is built on data in a database server. A successful attack on the database that drives a website or web application can therefore potentially give a hacker a broad range of powers, from modifying web site content (“defacing”) to capturing sensitive information such as account credentials or internal business data.