SQL-IDS: a specification-based approach for SQL-injection detection
Using parse tree validation to prevent SQL injection attacks