News for hackers. Stuff that matters.

A comment on Massive SQL injection attack making the rounds—694K URLs so far. Parent comment

Re:Massive SQL injection attack making the rounds—694K URLs ... by geuis on Friday April 01, 2011 @12:29AM (#2394927)
Exactly. I'd like to know how to check my personal site and some of our sites at work to see if they are vulnerable or not.
[ Parent | on HN ]
Re:Massive SQL injection attack making the rounds—694K URLs ... by tomjen3 on Friday April 01, 2011 @01:47AM (#2395134)
Do they use prepared statements? If not, they are almost certainly vulnerable.
[ Parent | on HN ]
Re:Massive SQL injection attack making the rounds—694K URLs ... by tomjen3 on Friday April 01, 2011 @12:24PM (#2396848)
Look I am not trying to start a flamewar here, but if his code is developed without knowledge of sql injections then they are almost certainly vulnerable.

It is almost impossible to fuck up prepared statements, so although they take longer to write it is a good way to secure a website.

[ Parent | on HN ]