Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Query sanitization

[ | Last updated: Jan 26, 2022 02:30PM UTC

I heard if i use query sanitization sql injections don't work. so my question is : Is query sanitization also can prevent blind sql injections?

Ben, PortSwigger Agent | Last updated: Jan 27, 2022 09:47AM UTC

Hi, Yes, that is correct. Although the techniques needed to find and exploit blind SQL injection vulnerabilities are different and more sophisticated than for regular SQL injection, the measures needed to prevent SQL injection are the same regardless of whether the vulnerability is blind or not. As with regular SQL injection, blind SQL injection attacks can be prevented through the careful use of parameterized queries, which ensure that user input cannot interfere with the structure of the intended SQL query.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.