php - SQL Injection conundrum -
as know usual sites use functions mysqli_query()
, mysql's php driver not allow multiple queries in single
->query() call (but can many in phpmyadmin sql running section) cannot directly add delete/update/insert
abusing of possibilities modify data under circumstances. 1st thing in case think 80% of potentially being @ risk (maybe lost of data) gone! & 2nd 1 is, rely on knowledge, why of injecting tutorials based , focused on multiple queries?
80% of potentially being @ risk (maybe lost of data) gone!
this assumption wrong.
why of injecting tutorials based on multiple queries?
because it's simple understandable example, proof of concept. 1 "if john have 2 apples , mike five...". if real mike doesn't feel spare apples, doesn't mean arithmetics wrong.
sql injection concudrum
there no conundrum in injections.
there no point in musings on injections.
there no percents of risk calculated dichotomy: either have application compromised or not.
there 1 simple rule - format data properly, , forget of injections forever.
Comments
Post a Comment