How to recover a website from SQL injections?

How to recover a website from SQL injections?

Please keep a backup of your MySQL database files frequently so that if any malicious attacks happen then you can recover from it.

SQL Injection in a nutshell is an exploit where unhandled\unexpected SQL commands are passed to SQL Server in a malicious manner.
With the SQL Server Find and Replace Values in All Tables and All Text Columns script for SQL Server 2005, the malicious data can be identified and corrected with confidence.
Validate the SQL commands that are being passed by the front end
Validate the length and data type per parameter
Convert dynamic SQL to stored procedures with parameters
Remove old web pages and directories that are no longer in use because these can be crawled and exploited

If for some reason the resolution implemented does not resolve the problem and the SQL Injection attack occurs again, the quickest path may be to do the following:

Shut down the web sites
Review the IIS logs to determine the commands issued and which web page\command has the vulnerability
Convert the code to determine which tables were affected and the command issued
Find and replace the string in your tables
Correct the web page\command that has the vulnerability
Test to validate the issue no longer occurs
Deploy the web page\command
Re-enable the web sites

If you have identified a SQLi vulnerability you need to fix it in the code. But if your site has been compromised, there are very rare chances of getting the data back if you do not have any backup. If there is no back up, just try and run some data recovery tools as the last hope.
By choosing AEserver's cheap hosting solution, your data will be safe, and you don't have to worry about losing your data. They provide secure servers to customers and the best security tools to add multiple security layers to your website.