4 ms·
especially nasty is magic_quotes , switch your old website to a new webhost (or have your existing one upgrade their PHP installation) and you get instant SQLi
by jiggy2011 14y ago
especially nasty is magic_quotes , switch your old website to a new webhost (or have your existing one upgrade their PHP installation) and you get instant SQLi vulnerabilities.
- smsm42 14y agoIf you relied on magic_quotes for security, you deserve it.
- jiggy2011 14y agoIn my defence, it wasn't my code but I was hosting it. Getting 3 angry "why does my website have porn all over it" calls in one day isn't fun.
- Firehed 14y agomagic_quotes has been deprecated for three and a half years, and widely understood to be a bad idea for around a decade. If you don't check your configs when moving to a new host, you get what's coming to you.
- jiggy2011 14y agoyou'd be surprised how many small businesses still have ~10+ year old websites.
- stesch 14y agoOh, yeah, the magic_quotes. They implemented something like this without knowing anything about SQL. PHP supported different SQL databases, but they implemented some kind of protection in a non standard way, just because it was supported by MySQL.