Originally publish on medium

Detection tells you something happened. Prevention stops it from mattering. Here is the prevention layer.

In the last three articles I wrote about detecting SQL injection attempts in PHP logs, why URL encoding blinds most pattern matching checks, and why unlimited URL decoding creates its own vulnerability. Every article ended with the same honest disclaimer.

"The real fix lives at the query layer, not the detection layer."

This is that article.