Re: HELP SQL INJECTION
| From: | Daniel Brown | Date: | Fri, 10 Jul 2009 19:50:02 +0000 |
| Subject: | Re: HELP SQL INJECTION | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-295164@lists.php.net to get a copy of this message | ||
On Fri, Jul 10, 2009 at 15:48, Chris Payne<chris_payne@danmangames.com> wrote:
> Hi everyone,
>
> My server appears to be the victim of a chinese hack-attack and I
> believe they managed to change pages via SQL Injection, do any of you
> have any ideas how to lock down my forms so MySQL cannot be used from
> my forms?
First and foremost:
http://php.net/mysql_real_escape_string
--
</Daniel P. Brown>
daniel.brown@parasane.net || danbrown@php.net
http://www.parasane.net/ || http://www.pilotpig.net/
Check out our great hosting and dedicated server deals at
http://twitter.com/pilotpig