Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have been using CodeIgniter for two years and I am digging into penetration testing. I think that ActiveRecord does good job at preventing SQL injections, but is there any possibility of bypassing ActiveRecord's filter system by ASCII Encoded / Binary String SQL injection?

If it is possible, then how can I prevent ASCII Encoded / Binary String SQL injection?

share|improve this question
The question in your title is not the same as your first question in the body since prevention is not the same as knowing if there is actually a vulnerability. I'm not familiar with CodeIgniter, but you might check the source code to see if it uses prepared statements. –  HamZa Nov 8 '13 at 18:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.