Support Forums › Categories › Coding Support Forums › Database Programming
Why not use this to help prevent SQL injection?

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode
Why not use this to help prevent SQL injection?
★Cooldude★ Offline
Regular Member
***
Posts: 228
Threads: 7
Joined: Sep 2010
Reputation: 5
#1
04-29-2011, 09:25 AM (This post was last modified: 09-07-2011, 01:43 PM by ★Cooldude★.)
Why don't we just add "--" to the end of our queries to prevent basic SQL injection?
Find
Reply
Solidus Offline
Double Helix
****
Posts: 644
Threads: 16
Joined: Oct 2009
Reputation: 43
#2
04-29-2011, 02:19 PM
Who's code?
[Image: di-Y0TG.png]
GFX Forums | RandomForum | Twitter
Website Find
Reply
eax Offline
Heartbreak Collision
***
Posts: 219
Threads: 27
Joined: Jul 2010
Reputation: 7
#3
04-30-2011, 04:12 AM
When the magic_quotes_gpc variable is off, it prevents some SQL attacks also.
Someone with no history is nothing but suspicious.
Find
Reply
★Cooldude★ Offline
Regular Member
***
Posts: 228
Threads: 7
Joined: Sep 2010
Reputation: 5
#4
04-30-2011, 09:15 AM
(04-29-2011, 02:19 PM)Solidus Wrote: Who's code?

No one in particular. If you add -- to then end of your query, and injection attempts like " 'OR 1=1" will just be read as a comment.
Find
Reply
Solidus Offline
Double Helix
****
Posts: 644
Threads: 16
Joined: Oct 2009
Reputation: 43
#5
04-30-2011, 12:39 PM
It's the most basic of all injections. I don't think you'll find a script that is vulnerable to that.
[Image: di-Y0TG.png]
GFX Forums | RandomForum | Twitter
Website Find
Reply
iCrack Offline
Visual Basic .NET Section...
***
Posts: 165
Threads: 21
Joined: Nov 2010
Reputation: 2
#6
05-05-2011, 11:18 AM
This section is so dead... Well I think it could work in some cases...
[Image: just-cause-2-header.jpg]
Find
Reply
harris21 Offline
Coding...Please wait!
***
Posts: 121
Threads: 0
Joined: Apr 2011
Reputation: 2
#7
05-05-2011, 06:22 PM
(05-05-2011, 11:18 AM)iCrack Wrote: This section is so dead... Well I think it could work in some cases...

I agree. It's a good section though. I don't know why it's so dead.
Find
Reply
eax Offline
Heartbreak Collision
***
Posts: 219
Threads: 27
Joined: Jul 2010
Reputation: 7
#8
05-06-2011, 07:33 AM
(05-05-2011, 06:22 PM)harris21 Wrote: I agree. It's a good section though. I don't know why it's so dead.

All the coding sections are dead. I don't know why. Does no one program on here?
Someone with no history is nothing but suspicious.
Find
Reply
harris21 Offline
Coding...Please wait!
***
Posts: 121
Threads: 0
Joined: Apr 2011
Reputation: 2
#9
05-06-2011, 07:47 AM
(05-06-2011, 07:33 AM)eax Wrote: All the coding sections are dead. I don't know why. Does no one program on here?

Well, i do programm a lot lately. We just need some more programmers here Tongue
Find
Reply
★Cooldude★ Offline
Regular Member
***
Posts: 228
Threads: 7
Joined: Sep 2010
Reputation: 5
#10
05-06-2011, 11:31 AM (This post was last modified: 05-20-2011, 08:22 AM by ★Cooldude★.)
SupportForums doesn't have many posts a day at the moment.
Find
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  how to open a 750 mb database,sql file? etc 17 7,458 08-21-2011, 03:57 AM
Last Post: AceInfinity
  Help: SQL without phpmyadmin? nevets04 7 3,659 12-30-2009, 11:47 AM
Last Post: wat
  SQL Interacting with Form Cppsean 3 1,647 10-19-2009, 12:21 PM
Last Post: Omniscient

Forum Jump:


Users browsing this thread: 1 Guest(s)