Detecting SQL Injection | Dataford Interview Questions

Your question is Detecting SQL Injection. Start with the requirements on the right.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem

Arch Capital is reviewing user-supplied text before it reaches a security filter. Write a function that detects whether an input string contains likely SQL injection patterns.

Given a string text, return True if it contains a suspicious SQL injection pattern, otherwise return False.

A string is considered suspicious if, after lowercasing it, it contains any of the following:

A SQL comment marker: --, /*, or */
A statement separator: ;
A tautology pattern such as or 1=1 or or '1'='1'
A SQL keyword sequence commonly used in injection attempts, such as union select, drop table, or insert into

Treat repeated spaces, tabs, and newlines as whitespace. Matching should be case-insensitive.

Constraints

1 <= len(text) <= 10^4
text contains printable ASCII characters and whitespace
Matching is case-insensitive
Return a boolean value

Function Signature

def detect_sql_injection(text):