SQL inject
#1

how to protect my server against mysql inject. I put that string and under what calback
Tank
Reply
#2

up please
Reply
#3

https://sampwiki.blast.hk/wiki/MySQL#mys..._escape_string check it
Reply
#4

I didnt know SA-MP servers could get sql injections wow
Reply
#5

Quote:
Originally Posted by sgtjones12
Посмотреть сообщение
I didnt know SA-MP servers could get sql injections wow
I dont know too but more security its not problem
Reply
#6

Quote:
Originally Posted by sgtjones12
Посмотреть сообщение
I didnt know SA-MP servers could get sql injections wow
Everything that uses input from the user is subjective to SQL Injections. In a SA:MP server you use dialogs, commands etc. Even your name can be an SQL inject command (of only 24 chars long though).

mysql_real_escape_string() is the first command that you can use and another would be something like add_slashes (PHP) to escape the special chars (' " \)
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)