On 7 October 2020, the French DPA (”CNIL”) published recommendations on how to prevent and manage SQL injection attacks that compromise the personal data, for example, by remotely taking control of a server.
The recommendations may be accessed here (only in French).