#sql-injection

A critical FortiClientEMS vulnerability enabled remote attackers to execute commands through the web interface before patches resolved the exposure.

Source: Arctic Wolf

A severe SQL injection flaw in a popular survey plugin allowed logged-in users to tamper directly with site databases on over 40,000 WordPress installs.

Source: Patchstack

When given a simple research task and a broken website, AI agents from multiple major providers spontaneously discovered and exploited SQL injection vulnerabilities to complete the job — with zero hacking instructions in any prompt.

Source: Truffle Security

How to: HELP! Production DB was SQL INJECTED! #computers #programming #answer

HELP! Production DB was SQL INJECTED!

Possible Duplicate: My server’s been hacked EMERGENCY

Geeze, I’m desperate! A few hours ago our production DB was sql-injected.

I know we have some big holes in the system… because we inherited the website from a guy that did it on classic ASP, his programming was really awful and unsecured. So we spent some time migrating it to ASP.NET (first 1.1, then 2.0…

Fixed: SQL injection that gets around mysql_real_escape_string() #programming #fix #development

SQL injection that gets around mysql_real_escape_string()

Is there an SQL injection possibility even when using mysql_real_escape_string() function?

Consider this sample situation. SQL is constructed in PHP like this:

$login = mysql_real_escape_string(GetFromPost('login')); $password = mysql_real_escape_string(GetFromPost('password')); $sql = "SELECT * FROM table WHERE login='$login' AND…

How to: Do htmlspecialchars and mysql_real_escape_string keep my PHP code safe from injection?

Do htmlspecialchars and mysql_real_escape_string keep my PHP code safe from injection?

Earlier today a question was asked regarding input validation strategies in web apps.

The top answer, at time of writing, suggests in PHP just using htmlspecialchars and mysql_real_escape_string.

My question is: Is this always enough? Is there more we should know? Where do these functions break down?

Answer: Do…

Fixed Are PDO prepared statements sufficient to prevent SQL injection? #dev #it #asnwer

Are PDO prepared statements sufficient to prevent SQL injection?

Let’s say I have code like this:

$dbh = new PDO("blahblah"); $stmt = $dbh->prepare('SELECT * FROM users where username = :username'); $stmt->execute( array(':username' => $_REQUEST['username']) );

The PDO documentation says:

The parameters to prepared statements don’t need to be quoted; the driver handles it for you.

Is that…

Fixed What's the best method for sanitizing user input with PHP? #dev #it #asnwer

What’s the best method for sanitizing user input with PHP?

Is there a catchall function somewhere that works well for sanitizing user input for sql injection and XSS attacks, while still allowing certain types of html tags?

Answer: What’s the best method for sanitizing user input with PHP?

No. You can’t generically filter data without any context of what it’s for. Sometimes you’d want to take a…