DevTransformFREE
Zero-Upload • 100% Client-Side
HomeRegex LibrarySQL Injection Attack Detection Heuristic Regex
100% Client-Side • 0 B Data Leaves Browser
security

SQL Injection Attack Detection Heuristic Regex

Detects common SQL injection attack signatures, comments, and dangerous stored procedures in user inputs.

Regular Expression Pattern:
/(?i)(?:\b(select|union|insert|update|delete|drop|alter|create|truncate|exec|execute)\b|--|/\*|\*/|xp_cmdshell|\bwaitfor\s+delay\b)/i
Valid Match Example:
1' UNION SELECT username, password FROM users --
Invalid / Non-Match Example:
john_doe_99

Regex Syntax Breakdown & Explanation

  • •(?i) : Case insensitive match
  • •\b(select|union|...) : Matches high-risk SQL keywords as discrete tokens
  • •--|/\* : Detects inline SQL comment syntax intended to truncate remaining queries

Implementation in Popular Languages

JavaScript / TypeScript
const regex = /(?i)(?:\b(select|union|insert|update|delete|drop|alter|create|truncate|exec|execute)\b|--|/\*|\*/|xp_cmdshell|\bwaitfor\s+delay\b)/i;
const isValid = regex.test("1' UNION SELECT username, password FROM users --");
console.log(isValid); // true
Python (re)
import re

pattern = r"(?i)(?:\b(select|union|insert|update|delete|drop|alter|create|truncate|exec|execute)\b|--|/\*|\*/|xp_cmdshell|\bwaitfor\s+delay\b)"
match = re.match(pattern, "1' UNION SELECT username, password FROM users --")
print(bool(match)) # True
Go (regexp)
package main
import (
  "fmt"
  "regexp"
)

func main() {
  re := regexp.MustCompile(`(?i)(?:\b(select|union|insert|update|delete|drop|alter|create|truncate|exec|execute)\b|--|/\*|\*/|xp_cmdshell|\bwaitfor\s+delay\b)`)
  fmt.Println(re.MatchString("1' UNION SELECT username, password FROM users --"))
}
Frequently Asked Questions

Frequently Asked Questions

Everything you need to know regarding specifications, syntax, and security best practices.

The regular expression pattern is /(?i)(?:\b(select|union|insert|update|delete|drop|alter|create|truncate|exec|execute)\b|--|/\*|\*/|xp_cmdshell|\bwaitfor\s+delay\b)/i. Detects common SQL injection attack signatures, comments, and dangerous stored procedures in user inputs.