An SQL injection attack is one of the most destructive types of online application attacks. It often happens when the attacker(s) alter, remove, read, and copy data from database servers. A successful SQL injection attack has the potential to compromise data availability, confidentiality, and integrity. The language used to express queries to database management systems is called SQL (structured query language). Although SQL injection attack detection and deterrent is not a new field of study, it is nonetheless important since approaches from other fields can be used to enhance the assault's detectability