Posts Tagged ‘Mysql’
Posted on June 4, 2009 - by admin
How Do I Secure My Mysql Database?
I’m putting together a database (PHP/MYSQL) online, and I want to secure it from hackers.
I have heard of people hacking databases with “sql injection”, on mainstream CMSs like phpNuke.
Could those hackings be due to everyone knowing how the system works, and I would I be more safe because no one knows my database layout?
Any help or links would be great.
Posted on June 2, 2009 - by admin
How Hard Is It To Run A Secure Linux Server, With Apache, Php, Mysql, And Mail Services?
I will be getting my own dedicated server soon and while I have a functional knowledge of the concepts of Linux, I don’t know everything. Will my server be reasonably secure if I am sure to keep everything updated and patched (assume there are no PHP scripts vulnerable to SQL injection etc.)
Posted on June 2, 2009 - by admin
Mysql Injection In Latest Version Of Mysql And Php?
I use MySQL version 5.0.18 and PHP version 5.1.1.
Do these products still contain MySQL injection risk? I have tried to write some SQL injection in the form, but it did work. So, does this mean I do not necessary to use function mysql_escape_string() for every form submitted by users?
Posted on May 31, 2009 - by admin
How Do I Prevent Sql Injection Attacks With Php And Mysql?
Use the mysql_real_escape_string() function of PHP and always test user input to ensure it’s valid. Lots of good links on the Wikipedia article below.
Posted on May 29, 2009 - by admin
In Php Will Htmlspecialchars() Protect My Mysql Database From Sql Injection?
Or do I need to use addslashes() as well, or maybe another function all together?