由于现在动态网页制作者经验的不足或采用现有的模板,很多网页中存在着不安全的因素,这就给网页本身以及系统造成了潜在的威胁。目前很多网页被攻击、挂木马,进而威胁到网页浏览者计算机的安全。本文针对SQL Server和ACCESS数据库安全性,介绍了SQL注入攻击概念及几种常用的攻击方法,提出了一些防范SQL注入攻击方法,最大限度地减少SQL注入攻击的可能性,保护数据库的安全。 Due to the lack of experience of dynamic webpage creators or the use of existing templates, unsafe factors exist in many webpages, which poses a potential threat to the webpage itself and the system. At present, many pages have been attacked, Trojans, which in turn threaten the safety of web browsers. In this paper, SQL Server and ACCESS database security, introduced the concept of SQL injection attacks and several commonly used methods of attack, put forward some prevent SQL injection attacks, to minimize the possibility of SQL injection attacks, and to protect the security of the database.