PHPDeveloper.org http://www.phpdeveloper.org Up-to-the Minute PHP News, views and community en-us Tue, 18 Jun 2013 15:31:35 -0500 30 <![CDATA[PHPBuilder: Pro PHP Security / Preventing SQL Injection, Part 2]]> http://www.phpdeveloper.org/news/6672 http://www.phpdeveloper.org/news/6672 PHPBuilder is back with the second part of their excerpt from the book Pro PHP Security (Apress)looking at finding and preventing SQL injections in your applications.

Topics it's broken out into include:

  • Kinds of Injection Attacks
  • Multiple-query Injection
  • INVISION POWER BOARD SQL INJECTION VULNERABILITY
  • Demarcate Every Value in Your Queries
They start off pretty basic - watch what you're directly including in your SQL statement - and move on to how attackers can end your SQL and push in their own and more. The Invision vulnerability is a more real-world example of what can go wrong when filtering isn't done right. The tutorial's rounded off with some of the functions and methods you can use to check the input and filter out the bad from the good.

]]> Thu, 09 Nov 2006 07:49:00 -0600