05-10-2004, 10:21 AM
|
||||
|
||||
sql injection
aku ni tak pakar sangat pasal security. so camner nak men-secure kan lagi script so orang tak inject xss or sql stuff?
__________________
Munzir + "/^[Hh](a)(z)\1\2[iI]$/"     |
|
05-10-2004, 10:40 AM
|
|||
|
|||
|
banyak cgi/perl script sesuai bagi hang . cari sendiri kat google
__________________
<body link="#0000CC" vlink="#0000CC" alink="#0000CC"> <img src="http://www.outsource.net.my/graphics/sywavelogo.jpg" width="373" height="52"> <strong><a href="http://www.outsource.net.my">Outsource.net.my</a></strong> - <em><font size="2">the search for competitiveness</font></em> <font size="2">( Project Managers : You can outsource your job to freelancers and get it done with the price you want to pay. ) ( Freelancers : You can do what you love to do and get paid. ) </font> </body> |
|
05-10-2004, 11:01 AM
|
|||
|
|||
|
ler... kena cari sendiri la abg mhr... tak best tul ayat tue ekeke
|
|
08-10-2004, 02:28 PM
|
|||
|
|||
|
Sql injection
cam ni daa
misal page page.php?sql=<? $sql="update table user administrator='my name' and password"; ?> kira jika source code ada $sql dia akan automatic guna variable $sql dan itu adalah sql injection. Untuk mengelakan sql injection kena declare data type macam c tapi php tak support jadi kena declare sendiri misalnya $sql=sprintf(%d,$_GET['id]); Kira id tu nombor guna %d kalau string sprintf($s,$_GET['message']; kalau nak sempoi lagi guna magic quote |
|
08-10-2004, 03:03 PM
|
||||
|
||||
 |
«
Previous Thread
|
Next Thread
»
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
Linear Mode
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Anti SQL Injection Code / Intro | YajivMalhotra | Website Programming | 8 | 11-10-2004 04:01 PM |
| About XSS Injection | YajivMalhotra | Website Programming | 3 | 11-10-2004 03:53 PM |
All times are GMT +8. The time now is 10:57 AM.
Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0 vBulletin skin by ForumMonkeys.com.
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0 vBulletin skin by ForumMonkeys.com.
