Defeating SQL Injection
WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation