sql-injection
Basic PHP sql injection question
I have been doing a bit of research on SQL injections and so far all I can see is when you areconcatenating query strings with variables, you have problems.[详细]
2023-03-29 13:45 分类:问答Is this PHP login technique safe considering SQL injection?
I\'am investigating a site that was written long ago by some PHP developer, and I\'d like to know if the login technique he used was safe or not.[详细]
2023-03-28 21:58 分类:问答Why do I get an SQL error when there is an apostrophe at the end of my URL?
Why do I get an error when I add \' to the end of a URL? For example : http://mywebsite.com/singel?id=24\'[详细]
2023-03-28 21:46 分类:问答If "function.mysql-connect" appears in my site search data what are people trying to hack?
I record the search terms in on my e-commerce site and I the term function.mysql connect appears frequently. Immediately it concerns me that there may be some kind of automated bot looking for holes[详细]
2023-03-28 07:23 分类:问答PHP mysql injection protection
I have written this short function to protect against my_sql injection, because of its importance I just want to double check with other\'s that this will function as I i开发者_如何转开发ntend.[详细]
2023-03-28 06:08 分类:问答SQL Injection, Quotes and PHP
I\'m quite confused now and would like to know, if you could clear things up for me. After the lateste Anon/Lulsec attacks, i was questioning my php/mysql security.[详细]
2023-03-28 00:45 分类:问答Is this JPA query vulnerable to SQL injection?
I have a library that executes a query based on a JPA WHERE statement provided by a caller. I am executing the following JPA query:[详细]
2023-03-27 17:15 分类:问答How To Determine Whether A User Attempted A SQL Injection Attack
I\'m familiar with using mysql_real_escape_string() and the PHP FILTER_SANITIZE function to prevent sql injections.[详细]
2023-03-27 15:55 分类:问答Is CodeIgnighter's Database Library Enough to Prevent Against Sql Injections
I am trying to write models in codeignighter like here which relies on CodeIgnighter\'s database API. I have read a forum post on whether or not Co开发者_JAVA百科deIgnighter\'s database API completely[详细]
2023-03-27 06:01 分类:问答SQL Injection in sql match query
Is this query hackable using sql injection ? SELECT count(*开发者_Python百科) FROM mytable_fts where mytable_fts match ?[详细]
2023-03-26 00:34 分类:问答