d2jsp
Log InRegister
d2jsp Forums > Off-Topic > Computers & IT > Programming & Development > Problem With My Php Code?
Add Reply New Topic New Poll
Member
Posts: 24,101
Joined: Nov 8 2007
Gold: 5,561.70
Nov 23 2014 01:01pm
Apparently there's a vulnerability in my PHP code, I think it's the underlined portion that may allow for an injection to take place but I'm not sure if it's that or something else

I don't even see how it could be taken advantage of.



Thanks
Member
Posts: 1,995
Joined: Jun 28 2006
Gold: 7.41
Nov 23 2014 02:50pm
Quote (lopelurag @ Nov 23 2014 02:01pm)


I don't even see how it could be taken advantage of.


What's your website? I'll show you.

Member
Posts: 1,358
Joined: Dec 30 2012
Gold: 0.10
Nov 23 2014 04:05pm
MY EYESSSS... just looking at that is a task in itself. you should post the code and place it in code brackets
Member
Posts: 1,995
Joined: Jun 28 2006
Gold: 7.41
Nov 23 2014 04:19pm
Quote (SelfTaught @ Nov 23 2014 05:05pm)
MY EYESSSS... just looking at that is a task in itself. you should post the code and place it in code brackets


and also the url, for science.
Member
Posts: 1,358
Joined: Dec 30 2012
Gold: 0.10
Nov 23 2014 05:12pm
Quote (Minkomonster @ Nov 23 2014 02:19pm)
and also the url, for science.


of course. the url, for the sake of science. how could i have forgotten..
Member
Posts: 9,412
Joined: Nov 18 2009
Gold: 20.00
Nov 23 2014 10:38pm
I hope you don't right code like that.
Member
Posts: 10,417
Joined: Jun 10 2006
Gold: 50.00
Nov 24 2014 02:37pm
you should use PDO to prepare and execute your sql queries. It is designed to prevent sql injection during prepare, so you don't even need to worry about all that.
Member
Posts: 11,637
Joined: Feb 2 2004
Gold: 434.84
Nov 24 2014 04:36pm
PHP developer writes shitty, unmaintainable and unreadable code with possible security issues. News at 11.
Go Back To Programming & Development Topic List
Add Reply New Topic New Poll