SQL injection
SQL injection filtering works in similar way to emails spam filters. Database firewalls detect SQL injections based on the number of invalid queries from host, the presence of OR and UNION blocks inside of the request, or other characteristics.