Protecting WordPress from SQL Injection Attacks
Filed under post-a-comment, development, real, pressed-words, middot, sql, php, database, security, escape, blog, wordpress, mysql
What he means is that in general WordPress does not sanitize MySQL queries. He recommends that WordPress provide “a proper set of SQL safe functions (ie $wpdb->escape_int and $wpdb->escape_str” and “use mysql_real_escape_string(), …
escalation http local php privilege tools vulnerabilities x org x serverescalation, http, local, php, privilege, tools, vulnerabilities, x org x server
Read the original:
Protecting WordPress from SQL Injection Attacks
Related Posts
- The need for standardization!
- Vuln: X.Org X Server Multiple Local Privilege Escalation and …
- Classic SQL Injection Tutorial
- PHP/MySQL: The Escape Method Done Right
- Escape-proof PHP/MySQL Injection Attacks Within the ORDER_BY Clause
January 23rd, 2008.
RSS Full


Leave a Comment