Linked Questions

3
votes
2answers
687 views

PHP: Am I free from SQL Injection? [duplicate]

Let me preface this by saying this is my first attempt to understand input sanitation, and at the moment I'm still a newbie to PHP. I've put together a quick register/log in website to test some ...
-4
votes
1answer
1k views

How to make my PHP website vulnerable to SQL injection [duplicate]

For training purposes, I want to make a demo website vulnerable to SQL injection. I went to the .htaccess file in the server and added these 2 lines: php_flag magic_quotes_gpc Off php_flag ...
0
votes
1answer
74 views

is sending SQL query operators in HTTP GET requests is some kind of security issue? [duplicate]

Our webserver is forwarding HTTP GET request to application server as below including a statement or condition like "AND 1=1", our Palo Alto Firewall detecting this traffic as SQL Injection alert. ...
0
votes
0answers
31 views

How does a SQL injection working how to stop it [duplicate]

Recently I have been doing hackthissite.org and you have to use SQL injections quite a bit. I understand how to do them, but not how they work. I was wondering if anyone knew what the internal error ...
543
votes
20answers
78k views

How can I explain SQL injection without technical jargon?

I need to explain SQL injection to someone without technical training or experience. Can you suggest any approaches that have worked well?
38
votes
7answers
7k views

Security risks of user generated HTML?

I am creating a website that allows people to upload HTML content. Currently these are the tags that are banned: <script></script> <iframe> <object> <embed> <style&...
4
votes
4answers
5k views

How is my website vulnerable for sql injections?

I am running a small website where I have published some articles. I am also very interesed in security topics and tried sqlmap on my website. It found the database name, so my question is how it ...
7
votes
2answers
15k views

How to extract information using a SQL injection on PHP?

I'm new to SQL injections so please forgive me if this appear a little amateur. I was working on a website where I managed to bypass authentication and login as a normal user: username: ' OR 1 -- - ...
2
votes
1answer
9k views

Manual Testing and Exploitation of an SQL Injection

So I read over this, this and this. I understand WHAT an sql injection is and the different TYPES of sql. But none of these guides give a definitive example on how to find, enumerate and exploit the ...
7
votes
1answer
2k views

SQL Injection explain this query

' 1=1 GROUP BY CONCAT_WS ('~',version(), FLOOR(rand(0)*2)) having min(0) 1>> My first question is what is CONCAT function is being used for in this query 2>> And Why do we use having min(0) in here.
2
votes
1answer
287 views

How does limiting the number of results from a SQL query help?

This highly upvoted answer asserts that as a protection against SQL injection, one should always use bound parameters and limit how many results get returned (emphasis mine) Obviously, the advice ...