(This paper introduces the technical principle of SQL injection and how to use H3C IPS device to protect against SQL injection. SQL injection attack is a common vulnerability attack method against databases. This article explains the principles and methods of the attack, combined with examples, and introduces the protection methods and strategies of H3C security products for such vulnerabilities.)