RE: [PHP] $_SERVER['REMOTE_ADDR'] and sql injection
| From: | Tommy Pham | Date: | Wed, 23 Jun 2010 08:12:51 +0000 |
| Subject: | RE: [PHP] $_SERVER['REMOTE_ADDR'] and sql injection | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-306343@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: Michael Shadle [mailto:mike503@gmail.com]
> Sent: Wednesday, June 23, 2010 1:07 AM
> To: Tommy Pham
> Cc: php-general@lists.php.net
> Subject: Re: [PHP] $_SERVER['REMOTE_ADDR'] and sql injection
>
> On Wed, Jun 23, 2010 at 1:01 AM, Tommy Pham <tommyhp2@gmail.com>
> wrote:
>
> > If you're going to implement this, then it's better to implement the
> conversion in the backend DB (via SP or UDF). So you can always use MySQL
> query browser or the command line to run queries or other methods
> depending on your access to the DB, especially if you need to find that
> malicious IP address quickly ;)
>
> -1 for complicating mysql setups :)
Then I presume that your firewall, servers, and application is test proven 'bulletproof'?
:-P
Regards,
Tommy