Re: Test for SQL Injection
- From: "Michael Condon" <admin@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 6 Nov 2008 11:22:52 -0600
I imagine that HP Scrawlr is a bit pricey.
I do have two layers of server side protection from SQL Injection as well.
----- Original Message ----- From: "David Crandell" <david@xxxxxxxxxxxxxxxx>
To: "'Michael Condon'" <admin@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>; <security-basics@xxxxxxxxxxxxxxxxx>
Sent: Monday, October 27, 2008 10:37 AM
Subject: RE: Test for SQL Injection
I have used HP's scrawlr.
To prevent attacks, validate input in your forms (server-side, not just with
validated with server-side code before they are passed to the database.
Vice President, Information Systems
On Hold Media Group
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On
Behalf Of Michael Condon
Sent: Sunday, October 26, 2008 1:59 PM
Subject: Test for SQL Injection
What are some open source utilities I can use to test a web page for SQL
Injection vulnerability (MySQL), and what coding practices can be
implemented to prevent the exploit?
- Prev by Date: RE: Starting up as a security consultant
- Next by Date: Re: Starting up as a security consultant
- Previous by thread: Re: Test for SQL Injection
- Next by thread: RE: Test for SQL Injection