How to Check Text for SQL Injection Attacks in Python

If your company has a website or application, chances are they have been the target of an SQL injection attack at least a handful of times. SQL injections occur when malicious user input is processed by a receiving program that allows the input to extend itself from a data context into a command context. This command position allows the attacker to perform all types of mischief on data within the system. Fortunately, protection against these threats can be as simple as employing an API to check text inputs for SQL injections, which we will demonstrate below.

To use the API in Python, we will run this command to install the client:

pip install cloudmersive-validate-api-client

Now we are ready to call the function with the following code:

from __future__ import print_function
import time
import cloudmersive_validate_api_client
from cloudmersive_validate_api_client.rest import ApiException
from pprint import pprint
# Configure API key authorization: Apikey
configuration = cloudmersive_validate_api_client.Configuration()
configuration.api_key['Apikey'] = 'YOUR_API_KEY'
# create an instance of the API class
api_instance = cloudmersive_validate_api_client.TextInputApi(cloudmersive_validate_api_client.ApiClient(configuration))
value = 'value_example' # str | User-facing text input.
detection_level = 'detection_level_example' # str | Set to Normal to target a high-security SQL Injection detection level with a very low false positive rate; select High to target a very-high security SQL Injection detection level with higher false positives.  Default is Normal (recommended). (optional)
try:
    # Check text input for SQL Injection (SQLI) attacks
    api_response = api_instance.text_input_check_sql_injection(value, detection_level=detection_level)
    pprint(api_response)
except ApiException as e:
    print("Exception when calling TextInputApi->text_input_check_sql_injection: %s\n" % e)

And that’s it! A simple solution to SQL injection.