What is the difference between MySQL & SQL?
I Have one friend, who is Really good in SQLi(SQL injections), he promised that he'll later test, that is my site Vulnerable.

So, if i have a Database (has like username/pw/email and blabla), should i use SQL/MySQL? And how can i know, that it isn't Vulnerable for SQL injections?
I don't want that people will spread out my site's users E-Mails..

SQL is the language (structured query language) for accessing a databse.

MySQL is a database engine that implements the SQL language.

Protect against SQL injections with parameterized queries (google it

That's entire paragraphs to explain. in short, you can't.

good database monitoring and known exploit "fingerprinting" will work pretty well against these attacks.

check HTTP requests, file changes, etc... a solid robots file (prevent google dorking)
proper file permissions, the list goes on...


You're weak points are public files. (things that have user interaction)
e.g. input boxes such as login registration forms can be exploited through XSS and in turn SQLi opens up

theres an addon for apache called modsecurity which is pretty cool it helps greatly! (assuming you run your own server)

This post was edited by Glyph89 on Jun 18 2013 01:18am

okay, thanks for the reply. When the site is on i'll try that Apache ModSecurity thing !