> For the complete documentation index, see [llms.txt](https://docs.prophaze.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prophaze.com/protection-use-cases/sql-injection-prevention.md).

# SQL Injection Prevention

Prophaze WAF deployed  wide range of methods into its core algorithm to block generic and advanced SQL injection attacks where not-sanitised user inputs is used to inject SQL commands which can disclose system Information and data leakage . The most common sql injection methods blocked are .

* SQL comment sequence
* SQL hex sequence
* SQL String Termination
* SQL Operators Blocking
* Blocks SQL Tautologies
* Blocks Common Database Names
* Blind SQL injection Blocking
* Injection Character anomaly blocking
* Injection Payload Blocking
* MSSQL specific signatures
* SQL Integer overflow
* SQL sleep command exploit
* Prevents conditional SQL injection
* MySQL character switch injection
* SQL Authentication Bypass
* pg\_sleep injection
* Chained SQL Injection
* Stored procedure Injection
* UDF Injection using data structure manipulation
* Concatenated SQL Injection