Protecting your MySQL database from SQL injection attacks with GreenSQL
Posted by: Anonymous
[ip: 80.216.225.141]
on August 26, 2008 04:29 PM
Hey, let's fix a major design flaw in PHP's main database interface by adding a proxy layer, yay! \o/
Great idea!
Stop using PHP if you worry about performance, maintainability or security. Languages that recommend using simple string concatenation to make SQL queries are not very good languages. The PHP team realized this later on, making their mysqli version with prepared statements, which lets you programmatically bind variables instead (but it's oh-so-confusing.)
By the way, this CAPTCHA could be beaten by any general purpose OCR out there.
Learn about Linux
Download Linux
Get Linux help
Protecting your MySQL database from SQL injection attacks with GreenSQL
Posted by: Anonymous [ip: 80.216.225.141] on August 26, 2008 04:29 PMGreat idea!
Stop using PHP if you worry about performance, maintainability or security. Languages that recommend using simple string concatenation to make SQL queries are not very good languages. The PHP team realized this later on, making their mysqli version with prepared statements, which lets you programmatically bind variables instead (but it's oh-so-confusing.)
By the way, this CAPTCHA could be beaten by any general purpose OCR out there.
#