Prevent Sql Injection

Moderator: Lixas

Post Reply
Freedom Fighter
Posts: 479
Joined: Tue May 16, 2006 11:53 am

Prevent Sql Injection

Post by Freedom Fighter »

OK simplest thing on the planet if your coding php. and you are accessing sql at all at any point make sure the query is closed asap.

the number one way of destroying a site is injecting the sql and gaining all data related to the mysql database.

ALWAYS CLOSE YOUR QUERYS


Gebbo
Posts: 554
Joined: Tue May 16, 2006 3:22 pm

SQL

Post by Gebbo »

Freedom Fighter wrote:OK simplest thing on the planet if your coding php. and you are accessing sql at all at any point make sure the query is closed asap.

the number one way of destroying a site is injecting the sql and gaining all data related to the mysql database.

ALWAYS CLOSE YOUR QUERYS
indeed and dont forget to always sanetise the information you put in your database!! Fighter how is site injecting actually done for learning purposes ? do the injectors pump random information to try and gain access or what ?
.............................:: Spirit of Fire ::..................................

Image
Freedom Fighter
Posts: 479
Joined: Tue May 16, 2006 11:53 am

Post by Freedom Fighter »


sql injection is the process of constantly requesting sql access from any and all pages on your site. if php code containing sql code is not closed when more info is accessed at your site that query remains open. Querys left open are open to repetitive requests and your database can either fail from over running or will release user info.
Post Reply