Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am using CodeIgniter for two years and I am digging into penetration testing nowadays. I think that ActiveRecord does good job for preventing sql injections, but i have following questions:

  1. I want to know is there any possibility of bypassing ActiveRecord's filter system by ASCII Encoded / Binary String SQL injection?

  2. If it is possible, then how to prevent ASCII Encoded / Binary String SQL injection?

share|improve this question
    
The question in your title is not the same as your first question in the body since prevention is not the same as knowing if there is actually a vulnerability. I'm not familiar with CodeIgniter, but you might check the source code to see if it uses prepared statements. –  HamZa Nov 8 '13 at 18:57
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.