What and How possible injection in PHP and mysql?

Question Posted / rakesh kumar nautiyal

3 Answers
6526 Views
RedAlkemi, I also Faced
E-Mail Answers

Answers were Sorted based on User's Feedback

What and How possible injection in PHP and mysql?..

Answer / ram

sql injection can be given along with user supplied data.
Examples of sql injection:

' or 1=1 --
' OR '1'='1. these sort of input could break into the code
by tricking the sql query.

Is This Answer Correct ?

9 Yes

1 No

What and How possible injection in PHP and mysql?..

Answer / tarun

first of all tell me what is injection here...........

Is This Answer Correct ?

1 Yes

0 No

What and How possible injection in PHP and mysql?..

Answer / dinesh g

What is Injection?
When a user is inserting any value into the text box, we
store that in a variable and place it in a query. If the
user also types any query within the text box our mysql will
run the query.

ex :

INSERT INTO students (name) VALUES ('Dinesh'); DROP TABLE
Students;

Here the user types his name as Dinesh also he write the
next query to drop the table. so this table is dropped if it
is present.

TO avoid it we use addslashes() else
mysql_real_escape_string() methods to escape from the users
query.

Is This Answer Correct ?

1 Yes

1 No

Post New Answer