HackingTruths Blog

I saw someone write code like this:
$sql = “select Password from user where EmailAddress=’” . $_REQUEST['EmailAddress'] . “‘”;
mysql_query($sql);
… etc …
When I pointed out that this code is vulnerable to SQL Injection, the coder said “prove it!”… Well, I went and tried it on the test website but it appears that PHP has some sort of builtin protection… The characters get automatically escaped.. Where is this documented?
Thanks

I have ubuntu and to run a program I need to run it in the terminal
as a root.
When I type in su then my passwords it says
su: Authentication failure
fakeroot doesn’t work
Can someone help?

We ended up somehow getting Antivirus pro. We got SpyHunter, and have scanned a few times, as well as hunted down all of the files we’ve been told to, but the popup remains. Anything else we should do?

Why would someone want to hack into my email? who could it be? and what could they find if they were able to?

I’ve always wondered if having an account here on yahoo answers puts me more at risk in terms of hackers.

Is it possible to have the ac adapter in while you are hacking the psp because my friends pandora battery is about to die and i do not want to get bricked. I have a slim psp.

Airtel, Idea, Vodafone or BSNL? As a student, my preference is for the cheapest. My calls will be limited within the state and sms, all over India. I’m not looking for net service or anything, but a prepaid connection with value for money. Any student package for Airtel is available?

Among the private players, which one has the best network/lowest cost? I would be taking a prepaid connection.
I guess the following are present currently:
Airtel
Vodafone
Idea

whats the difference between the regular iPhone and the iPhone 3g? and how much do they cost?

Heya,
Ok, my uncle has recently build a text based game using PHP and he wants to make sure his login is secure from SQL injection, so basically what im asking here is for somebody to give me a link to a tutorial on how to do SQL injection on a PHP login form.
Thanks for any help