How to prevent Code Injection:
It could allow privilege escalation and command injection on the system. This could lead the server to fall into a hacker’s hands. The hacker could modify parts of the application and retrieve sensitive information. Causing reputational damage. Malware could be installed on the application server by using code injection leading to attacks such as cookie theft, site defacement, or phishing.
1. Developers should never trust user input.
2. Use parameterized queries and apply the least privilege, such as a read-only user on both the client and the server-side.
3. Apply application-wide filters or sanitization on all user-provided input through filtering, encoding and whitelist validation.
4. Don’t let functions execute or interpret user input directly.
