Re: sql injection and php

From: Florian Weimer (Weimer@CERT.Uni-Stuttgart.DE)
Date: 05/29/02 

To: Jacek Lach <jlach@utopia.pl.eu.org>
From: Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>
Date: Wed, 29 May 2002 11:54:19 +0200

Jacek Lach <jlach@utopia.pl.eu.org> writes:

> Does the magic_quotes in php's configuration resolves the problem of sql
> injection?

It depends. If your database uses the same escaping strategy as PHP,
it may be safe. 

-- 
Florian Weimer 	                  Weimer@CERT.Uni-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898

Relevant Pages

  • Web Developers - Happy Hearts And HDTV! - Lockergnome
    ... Certificate on your MSIIS Web server. ... getting data from a database is only half the problem. ... Zend recently started a series about building rock solid code in PHP. ... which provides bulk database conversion. ...
    (freebsd-questions)
  • Re: Techniques for Vulneability discovery
    ... in mind) so i searched the net for some free database driven software and came ... the first thing i did was grab some info about PHP programming and some MySQL ... I did some more reasearch on different types of web based "input validation" ... PHP and SQL docs, etc.. ...
    (Vuln-Dev)
  • Re: Techniques for Vulneability discovery
    ... in mind) so i searched the net for some free database driven software and came ... the first thing i did was grab some info about PHP programming and some MySQL ... I did some more reasearch on different types of web based "input validation" ... PHP and SQL docs, etc.. ...
    (Security-Basics)
  • Re: CSS + xhtml static site - going dynamic?
    ... PHP then fills each content area. ... A better alternative is to have PHP pull the content off a database. ... management - menus and page linking need to be done by hand. ... So the second part is to formally build the linking structure into the ...
    (uk.net.web.authoring)
  • Re: CSS + xhtml static site - going dynamic?
    ... PHP then fills each content area. ... A better alternative is to have PHP pull the content off a database. ... management - menus and page linking need to be done by hand. ... So the second part is to formally build the linking structure into the ...
    (uk.net.web.authoring)