Support Forums

Full Version: Why not use this to help prevent SQL injection?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2 3
Why don't we just add "--" to the end of our queries to prevent basic SQL injection?
Who's code?
When the magic_quotes_gpc variable is off, it prevents some SQL attacks also.
(04-29-2011, 02:19 PM)Solidus Wrote: [ -> ]Who's code?

No one in particular. If you add -- to then end of your query, and injection attempts like " 'OR 1=1" will just be read as a comment.
It's the most basic of all injections. I don't think you'll find a script that is vulnerable to that.
This section is so dead... Well I think it could work in some cases...
(05-05-2011, 11:18 AM)iCrack Wrote: [ -> ]This section is so dead... Well I think it could work in some cases...

I agree. It's a good section though. I don't know why it's so dead.
(05-05-2011, 06:22 PM)harris21 Wrote: [ -> ]I agree. It's a good section though. I don't know why it's so dead.

All the coding sections are dead. I don't know why. Does no one program on here?
(05-06-2011, 07:33 AM)eax Wrote: [ -> ]All the coding sections are dead. I don't know why. Does no one program on here?

Well, i do programm a lot lately. We just need some more programmers here Tongue
SupportForums doesn't have many posts a day at the moment.
Pages: 1 2 3