sql-injection
I'm still confused about sanitizing strings
I am coding for an Intranet. In theory, I don\'t have to worry too much about SQL injection (I can see you throwing up your hands in horror already ;-)It\'s not really a secure app & doesn\'t have[详细]
2023-03-10 17:17 分类:问答If an attacker were able to read a Joomla!'s database, would he be able to do much harm?
I found out after a while that a component used on my website had an unfiltered parameter, in a WHERE condition in the following settings:[详细]
2023-03-10 16:46 分类:问答TinyMce protection against cross site scripting
We are planning to use TinyMce in a JSP. We have a standard security filter which keeps track of input data from forms.[详细]
2023-03-10 05:18 分类:问答Sql injection prevention techniques still vulnerable?
If I\'m using mysql_real_escape_string and addslashes to avoid sql Injection attack in my website is this two are enough to sto开发者_如何学运维p SQL Injection so its 100% sure no one can now attack u[详细]
2023-03-09 16:49 分类:问答Setting up a SQL injection honeypot
I just stumbled on a website vulnerable to an SQL injection attack by mistake ( Is this site vulnerable to an SQL injection attack? ).[详细]
2023-03-09 15:00 分类:问答Reference: What is a perfect code sample using the MySQL extension? [closed]
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical andcannot be reasonably answered in its current form. For help clari[详细]
2023-03-09 13:11 分类:问答Is this site vulnerable to an SQL injection attack? [closed]
This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time,or an extraordinarily narrow situation that is not generally applic[详细]
2023-03-09 02:54 分类:问答SQL Injection Detection - Have compiled regexes... looking for test injections
Over the weekend I\'ve compiled a list of regexs to check for sql injections in GET, POST and COOKIE super globals. They are by all accounts very effective in detecting if a sql injection is found. I\[详细]
2023-03-09 00:12 分类:问答Does this PHP code open up a website to SQL Injection
I\'m working on a web app and I came across this code snippit $email=$_POST[\'email\']; $pass=$_POST[\'pass\'];[详细]
2023-03-08 06:11 分类:问答A reasonable level of security vs. sql injection?
I\'m getting ready to launch a site - the first one that I coded from the ground up. It\'s going to be low traffic, and low-profile (probably won\'t get spidered by search engines.) I\'m using PEAR\'s[详细]
2023-03-08 05:46 分类:问答