Hello Guys,
I have heard about SQL injection, that is a very dangerous thing that can harm the database. so i want to know how i can prevent sql injection to infect my database via my php page. I'm using MySQL database with PHP extension mysqli
Results 1 to 6 of 6
-
09-07-2016, 12:40 AM #1Senior Member
- Join Date
- Jun 2016
- Posts
- 196
How to prevent SQL Injection in mysql?
-
09-16-2016, 10:32 PM #2Registered User
- Join Date
- Sep 2016
- Posts
- 31
you can make them in SQL forum
-
09-24-2016, 06:25 AM #3Registered User
- Join Date
- Feb 2014
- Posts
- 467
Prepared Statements do not combine variables with SQL strings, so it is not possible for an attacker to modify the SQL statement.
-
10-08-2016, 07:45 AM #4Registered User
- Join Date
- Jul 2016
- Location
- UK
- Posts
- 25
I have no ideas about this.
-
10-10-2016, 11:14 AM #5Junior Member
- Join Date
- Sep 2016
- Posts
- 18
Working with SQL statements, you absolutely not be added to the parameter string you for user input.
You must remove the special characters used in the query
-
10-11-2016, 10:49 AM #6Senior Member
- Join Date
- Jan 2016
- Location
- India
- Posts
- 373
What happens is that the SQL statement you pass to prepare is parsed and compiled by the database server.
Reply With Quote
Posting Permissions
|
Bookmarks