Using positive tainting and syntax-aware evaluation to counter SQL injection attacks
a classification of sql - injection attacks and countermeasures .