php - SQL Injection to statements -

-

this question has answer here:

by setting page, "register" users mysql database, , using following code:

$name = $_post['name']; $saltedpwd = md5($definedsalt.$_post['pwd']); $email = $_post['email'];  $query = "insert `users` ( `name`, `pwd`, `email` ) values ( '$name', '$saltedpwd', '$email' )"; $insert = mysqli_query($database, $query);

is vulnerable possible sql injections?

about email activation code, using code:

$address = $_get['email'];  if (isset($_get['val']) && (strlen($_get['val']) == 64)) { $validate = $_get['val']; }  if (isset($address) && isset($validate)) { $query = "update users set activated = 'true' ( email ='$address' , validate='$val' ) limit 1"; $result_query = mysqli_query($database, $query);  $get_member = ($database, "select name users email = '$email'"); $query_get = mysqli_fetch_array($get_member); $validated_name = $query_get['name']; $insert_validate = "insert `member` ( `name` ) values ( '$validated_name' ); $result_insert = mysqli_query($database, $insert_validate);

is vulnerable sql injections? suppose yes, because have retrieve value $_get request, guess them allowed put like: 

page.php?email=address@address.com'sql_injection'&val=123456asdfghjkl

am wrong? if vulnerable, how prevent injections?

yes , ,

what if user enters following line name ?

','',''); any_sql_query_here --

then this

$query = "insert `users` ( `name`, `pwd`, `email` ) values ( '$name', '$saltedpwd', '$email' )";

becomes

insert `users` ( `name`, `pwd`, `email` ) values ( '','',''); any_sql_query_here --', '$saltedpwd', '$email' )";

you should never use direct concatenation of strings query , must use prepared statements

more prepared statements - http://php.net/manual/en/pdo.prepared-statements.php

for example , query done this

$query = "insert users (name,pwd,email) values (:name,:pwd,:email)"; $statement = $pdodatabasehandle->prepare($query); $statement->bindvalue(':name',$name); $statement->bindvalue(':pwd',$saltedpwd); $statement->bindvalue(':email',$email); $statement-execute();

overall sql injection explained @ wikipedia - https://en.wikipedia.org/wiki/sql_injection


Comments

Post a Comment

Popular posts from this blog

yii2 - Yii 2 Running a Cron in the basic template -

-
i have seen instructions on running cron in advanced template, cant figure out how on basic template. have following controller in basic controllers folder. <?php namespace app\controllers; use yii\console\controller; /** * cron controller */ class croncontroller extends controller { public function actionindex() { echo "cron service runnning"; } public function actionmail($to) { echo "sending mail " . $to; } } i have navigated root of application , tried these comands yii cron php yii cron im getting unknown comand "cron" i know old question failed find actual answer this. if @ code yii exec file you'll notice requires /common/config/aliases.php file console/config/main.php. can naturally change these or copy on these advanced template. hope solves problem wanting same thing.
Read more

asp.net - 'System.Web.HttpContext' does not contain a definition for 'GetOwinContext' Mystery -

-
i realize question might seem trivial some, it's these types of things find myself fighting quite bit , want make sense of despite seeming losing battle in .net (for me anyway). so, if following: using system.web; ... applicationuser user = system.web.httpcontext.getowincontext().getusermanager<applicationusermanager>().findbyid(system.web.httpcontext.user.identity.getuserid()); that produces error in title , red getowincontext() , error cannot resolve symbol 'getowincontext()' however, if following (remove system.web in front of httpcontext ), works expected (or @ least no errors): using system.web; ... applicationuser user = httpcontext.getowincontext().getusermanager<applicationusermanager>().findbyid(system.web.httpcontext.user.identity.getuserid()); however, if (same line that's working using system.web commented out): //using system.web; ... applicationuser user = httpcontext.getowincontext().getusermana...
Read more

wso2esb - How to concatenate JSON array values in WSO2 ESB? -

-
we have json object below, expected result in: "(001),(011),(089),(120)". can suggest how iterate json array , concat values mention . "(001),(011),(089),(120)" thanks in advance. { "element": { "values": { "agentid": "aaaaa", "transactiondata": [ { "no": "001" }, { "no": "011" }, { "no": "089" }, { "no": "120" } ] } } } you can using iterate mediator, filter mediator , properties operation scope. try solution. @ end have (001),(011),(089),(120) value in concat-data property. have added complete proxy reference. <?xml version="1.0" encoding=...
Read more