136 reputation
16
bio website ryanscomputerhelp.com
location Westminster, CO
age 27
visits member for 2 years, 2 months
seen May 3 '13 at 2:13


Jun
16
awarded  Notable Question
Oct
15
awarded  Popular Question
Apr
27
comment A customers site had a big mysql injection attack on it, just want to learn from it
leachiancs is actually a legitimate $_GET request that can be accessed regular navigation. (i.e. /store/browse?species=leachiancs)
Apr
27
awarded  Editor
Apr
27
comment A customers site had a big mysql injection attack on it, just want to learn from it
I guess now what I said does sound pretty ignorant, it sounded like the those queries were running on my DB when in fact they weren't (see edited original post) I have since updated the clients site to not even run the query unless at least one term from the "acceptedTerms" array matches. I should have done that in the first place.
Apr
27
revised A customers site had a big mysql injection attack on it, just want to learn from it
added 623 characters in body
Apr
26
asked A customers site had a big mysql injection attack on it, just want to learn from it
Nov
25
awarded  Supporter
Oct
2
awarded  Autobiographer
Oct
2
awarded  Nice Question
Oct
2
awarded  Student
Jun
20
asked Hashed password storage with random salt