MySQL-Proxy learning to block SQL-Injection - Stefan Esser

I previously reported about my joy with MySQL-Proxy and a simple SQL-Injection detection based on a simple heuristic. read more.
install mysql securely linux mysql how server linux wire wireinstall …
Here is the original post: MySQL-Proxy learning to block SQL-Injection - Stefan Esser
mysql attacksmysql attacks

dsa-1557-1.txt

The PHP session data file stored the username and password of a logged in user, which in some setups can be read by a local user. Cross site scripting and SQL injection were possible by attackers that had permission to create cookies in …
application applications covers database databases developing […]