RSS FullRecent Posts
- how to hack hotmail password v 2008 (new app) | Free Tutorials
- HOW TO: Use PHP 5 Classes with JQuery and JSON to Insert into a …
- Newsletter Script
- Popularity Plugin for Wordpress SQL Error | netstat -an | grep -i …
- Mysql: handling null values during a insert | OpenKB::Server …
Recent Comments
- luca on XSS in mysql_error()
- Jacob Tuscon on SQL Power Injector 1.2 released - TechRepublic
- MySQL Security » MySQL Security Update Fixes Restrictions Bypass and Library … on MySQL Security Update Fixes Restrictions Bypass and Library ...
PHP Security considerations, a quick reference for the newbies.
Filed under saiweb, php-mysql-real-escape-string, mysql-real-escape-string, newbies, view-all-posts-in-php, considerations, saiweb-php-security, reference, injection, security, php, sql, view-all-posts-in-mysql, mysql
Passing RAW globals to mysql! ie. $sql = “SELECT * FROM users WHERE email=’.$_GET[’email’].”‘ and password=’”.$_GET[’password’]”‘” $result = mysql_query($sql);. So what is wrong with the above? SQL INJECTION welcome to a world where …
iis securityiis security
Read the original here:
PHP Security considerations, a quick reference for the newbies.
Related Posts
- Simple SQL Injection
- Newsletter Script
- Classic SQL Injection Tutorial
- DIY Quick and Dirty MySQL query tool with PHP
- mysql-injection-newbies.txt
March 20th, 2008.
Leave a Comment