 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 61
 Members: 0
 Total: 61
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
IT Security and Insecurity Portal |
|
|
|
SQL Injection: What is safe?
I'm writing a web application and ofcourse it has to be safe, so what is safe? Since SQL Injection is a upcoming trend I need make sure my app is 100% safe from SQL Inj ... |
|
|
|
|
| I don't think this is acccepted(spam) |
|
|
|
|
| I need a template generator for php.. I used smarty, but I?m gonna need to make my software portable to other webhosts, do I can?t install smarty there... Is there any template editor which can be inc ... |
|
|
|
|
Ok, I get it. Thanks for the replies.
I use mysql_real_escape_string() for security.
@waraxe: Yes, I use MD5, but I only posted part of my code |
|
|
|
|
We all know this code is vunarable for SQL injection:
$user=$_POST['username'];
$pass=$_POST['password'];
$result=mysql_query("SELECT * FROM admin_users WHERE user='$user ... |
|
|
| Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
