Reducing Structured Query Language Injection Vulnerabilities Through Functional Programming Principles

Web application security breaches frequently involve exploiting structured query language (SQL) injection vulnerabilities introduced by weaknesses in the coding style. Software engineers commonly lack the expertise and experience in implementing the functional programming principles of immutability, using pure functions, and reducing side effects to prevent vulnerabilities in their code. This study explores the changes web application developers can implement following the functional programming principles of immutability, using pure functions, and reducing side effects to reduce the presence of SQL injection vulnerabilities in web applications. The solution presented in this study, design strategies, supports the nascent design theory that applying the functional programming principles of immutability, using pure functions, and reducing side effects can reduce the presence of SQL injection vulnerabilities in web applications. When applied to an intentionally vulnerable web application, the design strategies developed through this study demonstrated effectiveness in reducing SQL injection vulnerabilities from web applications. This study contributes to the practice of software development by giving web application developers a new way to secure their web Applications.