sql-injection-prevention

A beginner-friendly, basic login & registration system built with PHP and MySQL.

Node.js authentication system featuring hashed passwords, server-side checks, and TOTP-based two-factor authentication

This is the simple crud application with PHP, MySQL, HTML, CSS, and Bootstrap.

A multi-threaded Java client-server authentication system built on TCP sockets and Maven multi-module architecture. Features secure user management with SHA-256 password hashing, SQL injection prevention via PreparedStatements, UUID-based session tracking, and a rich ANSI-colored console UI. Supports login, registration, password change, real-time

A secure online banking database system built with MySQL, featuring SHA-256 password hashing, AES balance encryption, role-based access control (RBAC), parameterized queries against SQL injection, full activity logging, and a trigger-based intrusion detection system for suspicious transactions.

ShopZone is a full-featured e-commerce platform with user authentication, product catalog, shopping cart, and order management, built with PHP, MySQL, and JavaScript. It offers secure payments, responsive design, and real-time updates for a seamless online shopping experience.

Desktop app that answers natural-language questions about college data by generating SQL, validating it, and running it read-only. Python, SQLite, Groq LLM API.

Validate LLM-generated SQL queries before execution to prevent unauthorized database access and data loss.

Secure Flask + PostgreSQL web app with role-based access control, parameterized queries, and password hashing. Group project — see README for individual contributions.

Secure Flask web application implementing JWT authentication, authorization, password hashing, and SQL injection prevention.

PostgreSQL order-management system with trigger-driven business logic (sales, balances, audit logging) and a secure, parameterised Python client.

Secure Flask message board demonstrating OWASP Top 10 secure programming principles

This project is a Spring MVC-based Java application that implements a security interceptor to validate incoming HTTP requests and prevent common vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), and malicious file uploads.

A modern and secure PHP user authentication system featuring a sleek UI, CSRF protection, and brute-force mitigation.

Secure Query Handler by Mirosław Zięba is a PHP class for secure, efficient SQL query management. Designed for robust database security, dynamic parameter validation, and transaction handling, it leverages parameterized queries to protect against SQL injection and maintain data integrity.

RESTful Blog API built with Node.js, Express.js and PostgreSQL featuring CRUD operations, search, pagination, input validation and SQL injection prevention.

ASP.NET Core MVC secure shopping platform implementing authentication, authorization, XSS prevention, SQL injection prevention, BCrypt password hashing, HTTPS, and Entity Framework Core.

A chatbot-based vulnerability scanner that helps users identify and resolve common web application security issues such as SQL Injection, Cross-Site Scripting (XSS), open ports, and more. It provides actionable advice on patching vulnerabilities and improving security, powered by Groq's AI model and an intuitive Gradio interface.

Natural-language to SQL analytics assistant with a two-layer security guardrail (AST validation + read-only DB role), local LLM (Ollama), FastAPI, and a measured eval harness — 100% execution accuracy, 100% adversarial block rate.

A role-based desktop Library Management System built with Python, Tkinter, and PostgreSQL — featuring secure authentication, QR-code scanning, automated fines, FIFO reservations, email notifications, and a 30-test pytest suite.