Evolution and Impact of SQL Injection Attacks in India: Analysis, Prevention Mechanisms, and Future Directions

SQL injection (SQLi) remains one of the most pervasive and dangerous vulnerabilities in web application security, allowing attackers to manipulate or access a database by injecting malicious SQL queries through improperly sanitized input fields. This study investigates the evolution and impact of SQLi attacks in India from 2000 to the present, focusing on high- profile incidents such as the 2016 Zomato breach, the 2020 BigBasket attack, and the 2023 AIIMS Delhi cyberattack. These breaches exposed millions of sensitive records, highlighting the vulnerabilities in database management and web application design. We analyze the methodologies used in these attacks, the security lapses they exploited, and the systemic issues that allowed them to succeed. In response to these challenges, organizations have adopted various prevention mechanisms, including parameterized queries, web application firewalls (WAFs), and encryption of sensitive data, as well as advanced security protocols like anomaly detection and real-time monitoring. Post-incident strategies such as forensic investigation, incident response, and collaboration with cybersecurity agencies have also been integral in mitigating the impact of SQLi. The paper discusses the effectiveness of these prevention and detection techniques and presents recommendations for enhancing SQLi defense in light of ongoing threats. Given the evolving nature of SQLi attacks, the paper concludes by emphasizing the need for continuous vigilance, regular security audits, and the integration of emerging security technologies to protect against future SQLi vulnerabilities.