sql-injection
sql remove string from field and update
I have unfortunately fallen victim to this recent attack: http://www.theregister.co.uk/2011/10/14/mass_website_inection_grows/. I have found the suspicious code inside many of the fields within my dat[详细]
2023-04-13 04:40 分类:问答SQL injection and XSS protection in PHP combining Code Ignitors xss_clean() and Zend PDO
I am in search of a function that will secure A开发者_如何学编程ll DB queries from MOST of the common threats and attacks. its like combining the classes of CI and Zend with putting custom code to hav[详细]
2023-04-12 23:03 分类:问答CSRF, XSS and SQL Injection attack prevention in JSF
I have a web application built on JSF with MySQL as DB. I have already implemented the code to prevent CSRF in my开发者_运维百科 application.[详细]
2023-04-12 07:53 分类:问答Will mysql real escape string prevent hack? [duplicate]
This question already has answers here: Closed 11 years ago. Possible Duplicate: Are mysql_real_escape_string() and mysql_escape_string() sufficient for app security?[详细]
2023-04-12 02:03 分类:问答Which MySQL Query is more secure? Part 2 [closed]
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical andcannot be reasonably answered in it开发者_运维技巧s current form.[详细]
2023-04-11 04:53 分类:问答Detecting Injection in Hibernate
I\'m using Hibernate and I want to prevent injections into Hibernate prepared statements. Is there a straightforward way to do this?[详细]
2023-04-11 04:31 分类:问答Batched queries with SQL Server Compact 4.0 and alternatives if unsupported?
I\'m trying to execute a query which contains \"batched\" commands, and supposedly this wasn\'t supported by Compact 3.5, however I want to avoid using SQL Express or a bigger solution that makes depl[详细]
2023-04-10 02:31 分类:问答SQL injection even when the variable is escaped [duplicate]
This question already has answers here: How can I prevent SQL injection in PHP? (27 answers) Closed 2 years ago.[详细]
2023-04-10 02:14 分类:问答How to sanitize input with PHP and the sqlsrv driver?
I\'m working on a PHP MSSQL project that is using the sqlsrv driver. What\'s the best way to stop SQL injection at开发者_如何学Gotacks? I need something like mysql_real_escape_string() but for sqlsrv[详细]
2023-04-09 17:45 分类:问答How php/mysqli ( prepared statements + bind params ) protect against SQL Injection?
How php/mysqli ( with prepared statements + bind params ) protect against SQL Injection ? Mysqli applies only \"real_escape_string\" for variables or do something else?[详细]
2023-04-09 10:26 分类:问答