N-Bomb(Nerd) Posted April 6, 2009 Share Posted April 6, 2009 Is SQL injection only a problem if you are outputting data? With my script it's only adding information to the database.. never pulling anything from it. Do I still have to worry about sql injection? Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/ Share on other sites More sharing options...
Maq Posted April 6, 2009 Share Posted April 6, 2009 Is SQL injection only a problem if you are outputting data? With my script it's only adding information to the database.. never pulling anything from it. Do I still have to worry about sql injection? You sure do. Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/#findComment-802049 Share on other sites More sharing options...
Fruct0se Posted April 6, 2009 Share Posted April 6, 2009 You can dowload "sql inject me" for firefox if you want to test your site for possible injections. Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/#findComment-802054 Share on other sites More sharing options...
gizmola Posted April 6, 2009 Share Posted April 6, 2009 Any place you take data that comes from a foreign source, sql injection is a possibiity. Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/#findComment-802087 Share on other sites More sharing options...
iarp Posted April 6, 2009 Share Posted April 6, 2009 You can dowload "sql inject me" for firefox if you want to test your site for possible injections. I'm weiry about this addon. One of my scripts that only i can access as a test-bed application has 0 protection and the addon reports everythings fine. I tweaked the script so that at least 1 item should fail and trip some type of warning but it reported pass as well. So eithor its a bad addon or i unno whatelse. Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/#findComment-802093 Share on other sites More sharing options...
br3nn4n Posted April 6, 2009 Share Posted April 6, 2009 You most certainly have the possibility of sql injection- it happens when you're inputting data, NOT when you're outputting it. You are in the situation of being most open to injection Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/#findComment-802101 Share on other sites More sharing options...
Mchl Posted April 6, 2009 Share Posted April 6, 2009 You most certainly have the possibility of sql injection- it happens when you're inputting data, NOT when you're outputting it. Actually, sql injection can occur whenever there's user submitted data in the query. It doesn't matter if it's INSERT or SELECT. Link to comment https://forums.phpfreaks.com/topic/152734-sql-injection/#findComment-802108 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.