Re: RE: Guru's advice needed ........[Security: SQL injection]
| From: | Marek Kilimajer | Date: | Fri, 19 Mar 2004 19:40:11 +0000 |
| Subject: | Re: RE: Guru's advice needed ........[Security: SQL injection] | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-180998@lists.php.net to get a copy of this message | ||
Matt Chatterley wrote:
In addition to protecting against SQL Injection, has anyone here experimented with detecting and recording attempts at injection? I've been pondering checking strings which come directly from user input for sql keywords (and possibly using regexps to check for potential SQL Syntax fragments), but before I begin, I thought asking would benefit me, if someone with more experience has already tried this...This might be an interesting social study :-)