diff --git a/fixtures/events/performance_problems/sql-injection/sql-injection-event-query.json b/fixtures/events/performance_problems/sql-injection/sql-injection-event-query.json
index 232c62326f7a56..53bcbe47c39ff6 100644
--- a/fixtures/events/performance_problems/sql-injection/sql-injection-event-query.json
+++ b/fixtures/events/performance_problems/sql-injection/sql-injection-event-query.json
@@ -20,7 +20,9 @@
     "method": "GET",
     "query_string": [
       ["username", "hello"],
-      ["sort", "username"]
+      ["sort", "username"],
+      ["empty", ""],
+      ["single", "u"]
     ]
   },
   "spans": [
diff --git a/src/sentry/utils/performance_issues/detectors/sql_injection_detector.py b/src/sentry/utils/performance_issues/detectors/sql_injection_detector.py
index a03fefe7045b31..8890295f0cb6e7 100644
--- a/src/sentry/utils/performance_issues/detectors/sql_injection_detector.py
+++ b/src/sentry/utils/performance_issues/detectors/sql_injection_detector.py
@@ -83,11 +83,17 @@ def extract_request_data(self, event: dict[str, Any]) -> None:
             query_value = query_pair[1]
             query_key = query_pair[0]
 
-            if not isinstance(query_value, str):
+            # Filters out empty strings or single character strings
+            if (
+                not isinstance(query_value, str)
+                or not isinstance(query_key, str)
+                or not query_value
+                or len(query_value) == 1
+            ):
                 continue
             if query_key == query_value:
                 continue
-            if query_value.upper() in SQL_KEYWORDS:
+            if query_value.upper() in SQL_KEYWORDS or query_key.upper() in SQL_KEYWORDS:
                 continue
             valid_parameters.append(query_pair)