Question

To defeat SQL injection attacks, a web application has implemented a filtering scheme at the client side: basically, on the page where users type their data, a filter is implemented using JavaScript. It removes any special character found in the data, such as apostrophe, characters for comments, and keywords reserved for SQL statements. Assume that the filtering logic does it job, and can remove all the code from the data.

Required:
Is this solution able to defeat SQL injection attacks?

Answer 1

It is possible to bypass this, so therefore, this isn't the solution to completely defeat SQL injection attacks.