Defeating SQL Injection
a classification of sql - injection attacks and countermeasures .