SQL injection attacks and defense by Clarke, Justin

Table of Contents: “…-- Testing for SQL injection -- Reviewing code for SQL injection -- Exploiting SQL injection -- Blind SQL injection exploitation -- Exploiting the operating system -- Advanced topics -- Code-level defenses -- Platform level defenses -- Confirming and recovering from SQL injection attacks.…”
An electronic book accessible through the World Wide Web; click to view