1. A computer implemented method performed by one or more processors for preventing SQL injection attacks, the method comprising the following operations: intercepting, at a first software hook, a web request associated with a web service, the first software hook associated with a first execution context of the web service; persisting at least a portion of the intercepted web request in a storage location associated with the first software hook, wherein the portion of the intercepted web request persisted in the storage location is made accessible to at least one additional execution context associated with the web service and the at least a portion of the intercepted web request is appended to one or more messages transmitted between one or more execution contexts, the intercepted web request comprising at least one string; intercepting a database query generated by at least one web service processing operation at a second software hook, the second software hook associated with execution of the generated database query, wherein the database query is generated in response to the intercepted web request, and wherein the second software hook retrieves the persisted portion of the intercepted web request; comparing at least a portion of the persisted portion of the intercepted web request with at least a portion of the intercepted database query by tokenizing the intercepted database query and comparing portions of the intercepted database query corresponding to each token to each string captured in the intercepted web request; and determining, prior to the intercepted database query being executed, whether the intercepted database query corresponds to a potential SQL injection attack if a string of the intercepted web request matches a portion of the intercepted database query and such string comprises a character that modifies a syntax of the intercepted database query.