This paper proposes a method SQL detection and algorithm to detect and prevent the tautology and union query based attacks at run time.