Knowledgebase

How To Protect MySQL Database From My SQL Injection Attacks ?

Posted by gillboss, 04-11-2009, 09:47 PM

hello, some body attacking on my server and changing my users profile name /password or any other information so How To Protect MySQL Database From My SQL Injection Attacks ?i have dedicate server i provide free wap sites to people with wildcard dns system and i have ConfigServer Security & Firewall installed. Thanks he changed name as "ramonescaner" of my all users also where in about changed "im stail single" Last edited by gillboss; 04-11-2009 at 09:54 PM.

Posted by Steve_Arm, 04-11-2009, 09:50 PM

Variable strings in queries need to be escaped before run. See mysql_real_escape_string(). Are you sure it is from an sql injection?

Posted by gillboss, 04-11-2009, 10:08 PM

yes and you can see in images i have attached how he changed name : and About: of my all users Attached Thumbnails

Posted by Veks, 04-12-2009, 02:35 AM

That doesn't show how, just that he did.

Add to Favourites

Print this Article