---
title: cf.waf.score.sqli · Cloudflare Ruleset Engine docs
description: An attack score from 1–99 classifying the SQL injection (SQLi) attack vector.
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.score.sqli/
  md: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.score.sqli/index.md
---

# cf.waf.score.sqli

`cf.waf.score.sqli` Number

An attack score from 1–99 classifying the SQL injection (SQLi) attack vector.

Requires a Cloudflare Enterprise plan. You must also enable [attack score detection](https://developers.cloudflare.com/waf/detections/attack-score/).

Categories:

* Request
