3 ms·
- all web input needs to run thru the same filter - that filter disallows SQL keywords - you're done If this guy wasn't on a shared host, he could just install
by sabat 18y ago
- all web input needs to run thru the same filter
- that filter disallows SQL keywords
- you're done
If this guy wasn't on a shared host, he could just install mod_security and its default config should take care of it. Presuming Apache of course.
- LogicHoleFlaw 18y agoI think ANDrew, TOny, SETh, and BYron might have problems with that filter.
- sabat 18y agoThey might if the programmer didn't have the sense to surround the keywords with word boundary markers. You know, something like %20SET%20 etc. I do this successfully with mod_security, and a good regex kit will let you do this easily.