Re: SECURITY PRECAUTION BEFORE SUBMITTING DATA IN DATABASE
| From: | Michael A. Peters | Date: | Thu, 21 May 2009 23:20:16 +0000 |
| Subject: | Re: SECURITY PRECAUTION BEFORE SUBMITTING DATA IN DATABASE | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-292913@lists.php.net to get a copy of this message | ||
Eddie Drapkin wrote:
Suhosin is completely not-related to SQL, though, I don't know why you'd bring it up...I brought it up because suhosin catches many exploits that otherwise get through, including exploits that allow inclusion of remote files that can then be used to run arbitrary commands on the server, send include files (such as the db authentication script) as plain text, all kinds of nasty can result.