Below are the high level steps to getting SQLGuard running in a project on a clean box. If you already have your workspace in order, you can simply do steps 9-12. 1. install eclipse (or similar) http://www.eclipse.org/downloads/ 2. install tomcat (or similar) http://tomcat.apache.org/download-60.cgi 3. install tomcat plugin for eclipse http://www.eclipsetotale.com/tomcatPlugin/tomcatPluginV321.zip 4. install a database of your choice 5. install a jdbc driver for the database 6. Enable Tomcat plugin in eclipse Window -> Preferences -> Tomcat 7. start a project in eclipse File -> New -> Project -> Java -> Tomcat Project 8. Add jsp pages to the root of the project, etc. 9. Add SQLGuard to the project Right Click on Project -> Properties -> Java Build Path -> Libraries -> Add External Jar -> (browse to SQLGuard.jar) 10. Test SQLGuard with some simple queries to your database, something similar to the code below (pass a trick as the username, such as "admin;#" for sql server, etc) 11. Compile the project as a WAR and import with the tomcat manager Right Click on Project -> Tomcat Project -> Export to WAR 12. Copy the SQLGuard.jar file to the Tomcat lib folder "\Apache Software Foundation\Tomcat 6.0\lib" 13. Add SQLGuard.jar to Tomcat's classpath using the "Configure Tomcat" tool. System.out.println("\nQuerying with unsafe call ... "); try { String DRIVER = args[0]; //"net.sourceforge.jtds.jdbc.Driver"; //jdbc:jtds:sqlserver://:1433/;domain=;user=;password= String url=args[1]; Class.forName(DRIVER).newInstance(); Connection conn = DriverManager.getConnection(url); Statement stmt = conn.createStatement(); String query = "SELECT * FROM dbo.Logs WHERE username='" + args[2] + "' AND password='" + args[3] + "'"; System.out.println(query); ResultSet rst=stmt.executeQuery(query); while(rst.next()) { System.out.println("Row = " + rst.getString(2)); } rst.close(); stmt.close(); conn.close(); } catch(Exception er) { System.out.println("Oops: " + er.getMessage()); } System.out.println("\n\nNow querying with safe system ... \n\n"); try { String DRIVER = args[0]; //"net.sourceforge.jtds.jdbc.Driver"; //jdbc:jtds:sqlserver://:1433/;domain=;user=;password= String url=args[1]; System.out.println(url); Class.forName(DRIVER).newInstance(); Connection conn = SafeDriverManager.getConnection(url); Statement stmt = conn.createStatement(); String query = SQLGuard.init() + "SELECT * FROM dbo.Logs WHERE username='" + SQLGuard.wrap(args[2]) + "' AND password='" + SQLGuard.wrap(args[3]) + "'"; System.out.println(query); ResultSet rst=stmt.executeQuery(query); while(rst.next()) { System.out.println("Row = " + rst.getString(2)); } rst.close(); stmt.close(); conn.close(); } catch(Exception er) { System.out.println("Oops: " + er.getMessage()); }