Re: HELP SQL INJECTION
| From: | Eddie Drapkin | Date: | Fri, 10 Jul 2009 19:51:06 +0000 |
| Subject: | Re: HELP SQL INJECTION | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-295165@lists.php.net to get a copy of this message | ||
On Fri, Jul 10, 2009 at 3:50 PM, Daniel Brown<danbrown@php.net> wrote:
> On Fri, Jul 10, 2009 at 15:48, Chris Payne<chris_payne@danmangames.com> wrote:
>> Hi everyone,
>>
>> My server appears to be the victim of a chinese hack-attack and I
>> believe they managed to change pages via SQL Injection, do any of you
>> have any ideas how to lock down my forms so MySQL cannot be used from
>> my forms?
>
> First and foremost:
>
> http://php.net/mysql_real_escape_string
>
> --
> </Daniel P. Brown>
> daniel.brown@parasane.net || danbrown@php.net
> http://www.parasane.net/ ||
> http://www.pilotpig.net/
> Check out our great hosting and dedicated server deals at
> http://twitter.com/pilotpig
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
You, sir, are an email list ninja. Not ten seconds before I hit Send,
Gmail tells me you ninja'd my response!