Network security education: SQL injection attacks

This paper presents an application that is used in network security courses at the Department of Computing and Control, Faculty of Technical Sciences in Novi Sad. The application is used to demonstrate various types of SQL injection attacks to the students. An overview of this class of attacks is given, as well as a description of the application. The application has been written in PHP language, and relies on MariaDB database.