pkirsch Posted February 3, 2007 Share Posted February 3, 2007 What can i do to stop My Sql Injection? what are other things i can so to protect databases (primarily My Sql.) Also what can i do to stop spam bots? (sorry, a bit off topic; just thought I'd ask!) Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/ Share on other sites More sharing options...
wildteen88 Posted February 3, 2007 Share Posted February 3, 2007 To stop SQL injection use the mysql_real_escape_string function on any data that goes into a query. Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-176008 Share on other sites More sharing options...
hvle Posted February 3, 2007 Share Posted February 3, 2007 can you give an example of sql injection? Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-176125 Share on other sites More sharing options...
pkirsch Posted February 3, 2007 Author Share Posted February 3, 2007 Well i have a forum and i recently turned it off! Temporarily! (it's Invision Power Board) and because i turned it off, nobody can Register... But everyday still i have registrations! I would assume that this would be a MySQL Injection into my database! Any other suggestions? If it's not MySQL injection, Then what is it? ??? Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-176326 Share on other sites More sharing options...
artacus Posted February 3, 2007 Share Posted February 3, 2007 Well that sounds like cross site scripting. SQL Injection is something like this. User enters: username: 1' OR userID > 1 LIMIT 1 -- password: never read query = SELECT * FROM users WHERE username = '1' OR userID > 1 LIMIT 1 --' AND password = 'never read' Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-176356 Share on other sites More sharing options...
wildteen88 Posted February 4, 2007 Share Posted February 4, 2007 You can still register I believe even if the forum is "turned off". This is not SQL injection. If its SQL injection then they will do far more serious things, such as delete the forums database or all databases, than register an account for your forum. I would take this up with the developers of Invision Power Board if where you. Go to http://forums.invisionpower.com/ for support on this. Also I am going to move this to the Third Party support forum too due to this being a support request for IPB Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-176793 Share on other sites More sharing options...
pkirsch Posted February 5, 2007 Author Share Posted February 5, 2007 Thanks guys! Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-177708 Share on other sites More sharing options...
Hypnos Posted February 7, 2007 Share Posted February 7, 2007 On premade PHP applications, the SQL injection prevention methods should already be there (and if there are holes, they are usually found and patched fairly quickly on mainstream scripts like Invision forums). Make sure you're using the latest version of your forum. Link to comment https://forums.phpfreaks.com/topic/36890-solved-my-sql-injection/#findComment-178899 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.