N-Bomb(Nerd) Posted April 6, 2009 Share Posted April 6, 2009 Is SQL injection only a problem if you are outputting data? With my script it's only adding information to the database.. never pulling anything from it. Do I still have to worry about sql injection? Quote Link to comment Share on other sites More sharing options...
Maq Posted April 6, 2009 Share Posted April 6, 2009 Is SQL injection only a problem if you are outputting data? With my script it's only adding information to the database.. never pulling anything from it. Do I still have to worry about sql injection? You sure do. Quote Link to comment Share on other sites More sharing options...
Fruct0se Posted April 6, 2009 Share Posted April 6, 2009 You can dowload "sql inject me" for firefox if you want to test your site for possible injections. Quote Link to comment Share on other sites More sharing options...
gizmola Posted April 6, 2009 Share Posted April 6, 2009 Any place you take data that comes from a foreign source, sql injection is a possibiity. Quote Link to comment Share on other sites More sharing options...
iarp Posted April 6, 2009 Share Posted April 6, 2009 You can dowload "sql inject me" for firefox if you want to test your site for possible injections. I'm weiry about this addon. One of my scripts that only i can access as a test-bed application has 0 protection and the addon reports everythings fine. I tweaked the script so that at least 1 item should fail and trip some type of warning but it reported pass as well. So eithor its a bad addon or i unno whatelse. Quote Link to comment Share on other sites More sharing options...
br3nn4n Posted April 6, 2009 Share Posted April 6, 2009 You most certainly have the possibility of sql injection- it happens when you're inputting data, NOT when you're outputting it. You are in the situation of being most open to injection Quote Link to comment Share on other sites More sharing options...
Mchl Posted April 6, 2009 Share Posted April 6, 2009 You most certainly have the possibility of sql injection- it happens when you're inputting data, NOT when you're outputting it. Actually, sql injection can occur whenever there's user submitted data in the query. It doesn't matter if it's INSERT or SELECT. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.