A method to detect and prevent SQL injection attack