A survey on SQL injection: Vulnerabilities, attacks, and prevention techniques
Securing web application code by static analysis and runtime protection