SQL injection attack
Published by | Filed under pmp, injection-attack, mysql-real-escape-string, sql, attack
“SQL Injection” refers to entering MySQL queries into the input fields in the website’s contact form or registeration form , search form etc.. Ex. If the user inputs x’DROP TABLE members;’. in the input field provided and if below …
2nd atom change meeting meeting 2nd october october 2007 oss […]
PHP Security considerations, a quick reference for the newbies.
Published by | Filed under saiweb, php-mysql-real-escape-string, mysql-real-escape-string, newbies, view-all-posts-in-php, considerations, saiweb-php-security, reference, injection, security, php, sql, view-all-posts-in-mysql, mysql
Passing RAW globals to mysql! ie. $sql = “SELECT * FROM users WHERE email=’.$_GET[’email’].”‘ and password=’”.$_GET[’password’]”‘” $result = mysql_query($sql);. So what is wrong with the above? SQL INJECTION welcome to a world where …
iis securityiis security
Read the original here: PHP Security considerations, a quick reference for the newbies.
considerations injection mysql mysql real […]
RSS Full

