Top "Sql-injection" questions

SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).

Found 'OR 1=1/* sql injection in my newsletter database

I found the following in the "e-mail" field of my newsletter subscriber database: ' OR 1=1/* I know it's a SQL …

mysql security sql-injection
What are good ways to prevent SQL injection?

I have to program an application management system for my OJT company. The front end will be done in C# …

c# sql security sql-injection
A good way to escape quotes in a database query string?

I've tried all manner of Python modules and they either escape too much or in the wrong way. What's the …

python database escaping sql-injection
What is the PDO equivalent of function mysql_real_escape_string?

I am modifying my code from using mysql_* to PDO. In my code I had mysql_real_escape_string(). What …

php mysql pdo sql-injection
Does CodeIgniter automatically prevent SQL injection?

I just inherited a project because the last developer left. The project is built off of Code Igniter. I've never …

codeigniter sql-injection
Can I protect against SQL injection by escaping single-quote and surrounding user input with single-quotes?

I realize that parameterized SQL queries is the optimal way to sanitize user input when building queries that contain user …

sql security sql-server-2000 sql-injection sanitization
Do htmlspecialchars and mysql_real_escape_string keep my PHP code safe from injection?

Earlier today a question was asked regarding input validation strategies in web apps. The top answer, at time of writing, …

php security xss sql-injection
Specify parameters with SQLMAP

I'm a student learning php & mysql development. i have setup a private lab ( VM ) inside my computer to test &…

sql-injection sqlmap
The ultimate clean/secure function

I have a lot of user inputs from $_GET and $_POST... At the moment I always write mysql_real_escape_…

php security xss sql-injection
function to sanitize input to Mysql database

I am trying to put a general purpose function together that will sanitize input to a Mysql database. So far …

php mysql sql-injection sanitization