Results 1 to 3 of 3

Thread: Security issue???

  1. #1
    Join Date
    Jan 2007
    Posts
    94
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Angry Security issue???

    So I went on vacation and just came back and i noticed some random entries in one of my database tables. the entries did not have an associated userid and were just a bunch of random letters. i know i'm relatively new to coding, so i figured i'd ask if this was some sort of hack?

    i am considering outsourcing my websites now because i don't want my sites hacked... is there a relatively simple fix for something like this (for this security issue)? or a list of things i should check in the code? or am i better off putting this project on elance/rent a coder and having an experienced coder redo my sites???

    thanks

  2. #2
    Join Date
    Jun 2005
    Location
    英国
    Posts
    11,876
    Thanks
    1
    Thanked 180 Times in 172 Posts
    Blog Entries
    2

    Default

    am i better off putting this project on elance/rent a coder and having an experienced coder redo my sites???
    Of course not. Then you wouldn't learn anything, would you?
    So I went on vacation and just came back and i noticed some random entries in one of my database tables. the entries did not have an associated userid and were just a bunch of random letters. i know i'm relatively new to coding, so i figured i'd ask if this was some sort of hack?
    How should we know? It could just be a programming error.

    Seeing the code in question would help, but the most common cause of security flaws is failing to properly validate user input. In PHP, this generally means running everything you receive from the user through mysql_real_escape_string() before using it in a query. More sophisticated languages tend to use an ORM to abstract database access, which will take care of this for you.
    Remember, $_GET, $_POST, $_REQUEST, and $_COOKIE data can all be created or modified at any time by the user (but $_SESSION is safe).
    Twey | I understand English | 日本語が分かります | mi jimpe fi le jbobau | mi esperanton komprenas | je comprends français | entiendo español | tôi ít hiểu tiếng Việt | ich verstehe ein bisschen Deutsch | beware XHTML | common coding mistakes | tutorials | various stuff | argh PHP!

  3. #3
    Join Date
    Jan 2007
    Posts
    94
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Default

    ok ill try out the mysql_real_escape_string

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •