Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
if its your own server, you can use SQLMAP to identify exploits., also a good read the Hitchhikers guide.
are you using PDO or MYSQLi_.. or dare i say MYSQL_?
http://sqlmap.org/
https://phpdelusions.net/sql_inject... -
@C0D4 Thanks!
It's hosted on Namecheap.
Unfortunately(?) it's MySQL. You didn't sound too happy about it. XD
Thanks for the links, I'll check them out! -
@GMR516 mysql_ is dated (i still have some code bases using it) but that doesn't mean you can't prevent SQL injection.
mysql_real_escape_string() will be one of your best friends, and im assuming Apache for the web server??
you could give some of the responsibility of sqli prevention to Apache using mod_security
https://www.modsecurity.org
Related Rants
I have to admit I didn't expect that...
Never have I been so satisfied as I am right now after having implemented a login and user account system with the ability to update user preferences with databases n' shit in PHP after only knowing PHP for a day.
Speaking of all that, do you guys know of any good place to make sure all my stuff is secure? No SQL injections n' the like.
rant
php
mysql
accounts
login