HackingTruths Blog

I use PHP and Microsoft SQL Server 2000 to build dymanic pages. Assume I have code like this:
$id = $_POST['id'];
$query = “select * from employees where id = ‘$id’”;
$result = mssql_query($query);
Is this safe from SQL injection?
If not, how to prevent it?

How do you prevent from someone hacking into your computer and stealing data?

I am using asp.net,c#,Sql Server web application for community portal site. Some hacked the site by SQLINjection.
How to Prevent SQL Injection Storm Attacks ?

I have a php website. My form page is validated through both, PHP, and Javascript. The javascript makes a box appear on the page that says, “errors, etc. etc.” How do I limit the text areas to where no special characters are allowed? I’m not really that great with php so please over-explain your answers. Thanks.

My friend’s email has been hacked (possibly) and she wants to stop it.

I have some problems with sql injection. How can I prevent my sites from sql injections? Please help me!