Mind blowing SEO improving and Google rank increasing Signature Rotator SEO Tool.
SEO Forum
›
Money Making / Business Marketing
›
Search Engine Optimization 
Most common php vulnerabilities?
Most common php vulnerabilities?
Tags:
None
New Thread
Advanced Reply
6
85
For what version though? Each version has their own and many are patched very quickly.
The most common vulnerability in PHP is the coder. But you have other issues like SQL injection, remote file inclusion, session jacking, cross site request forgery, directory traversal, revealing the source code, XSS.
The most common vulnerability in PHP is the coder. But you have other issues like SQL injection, remote file inclusion, session jacking, cross site request forgery, directory traversal, revealing the source code, XSS.
34
6
I am not asking about specific PHP version but rather in general! What makes SQL injection possible?
85
34
Quote:SQL injection is a code injection technique, used to attack data driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).[http://en.wikipedia.org/wiki/SQL_injection
85
(10-03-2013 06:18 PM)Maya Wrote:Quote:SQL injection is a code injection technique, used to attack data driven applications, in which malicious SQL...That does not answer his question (He asked how is it possible, not what it is) and could not be properly answered in a post here since most people on here do not read past a couple sentences.
Just SQL injection alone is a massive subject, let alone all the other things I stated before.
109
The majority of websites have the issue with SQL injection however they don't realize that until it already too late, and it's actually very difficult know where the problem is because the code and everything appears to work fine!
85
Test your code before going to production for things like SQL injection and you won't ever have to worry about it, plus there are ways to prevent it from happening if you use prepared statements and parameterized queries. What that means is the statement sent and parsed separately from any parameters. If this is done it would then be impossible to inject anything malicious SQL wise.
Just because your code "works" does not mean it is ready for production.
Also forgot to say the adapter you use, can change how the code should be used, make sure you understand the differences between them when you're programming.
Just because your code "works" does not mean it is ready for production.
Also forgot to say the adapter you use, can change how the code should be used, make sure you understand the differences between them when you're programming.
6
Thanks Chod not I understand that there are ways to prevent SQL injection.
109
That is why most powerful companies hire hackers to test their security!
85
1
0
Almost all sites have the problem with SQL injection injection however they don't recognize that until it already too delayed, and it's actually extremely tough know where the problem is because the rule and everything seems to work excellent.
0
This record wo exclude illustration PHP code since it is composed for a non-engineer group of onlookers.
1. Remote Code Execution or RCE. ...
2. SQL Injection or SQLi. ...
3. Cross-Site Scripting or XSS. ...
4. Cross-Site Request Forgery or CSRF. ...
5. Verification Bypass. ...
6. PHP protest Injection. ...
7. Remote File Inclusion (RFI) and Local File Inclusion (LFI)
1. Remote Code Execution or RCE. ...
2. SQL Injection or SQLi. ...
3. Cross-Site Scripting or XSS. ...
4. Cross-Site Request Forgery or CSRF. ...
5. Verification Bypass. ...
6. PHP protest Injection. ...
7. Remote File Inclusion (RFI) and Local File Inclusion (LFI)
Similar Topics:
User(s) browsing this thread: 1 Guest(s)
