README.md

Description

Stop SQL Injections

More Info

Submitted On
By	marcojetson
Level	Beginner
User Rating	5.0 (25 globes from 5 users)
Compatibility	PHP 4.0, PHP 5.0
Category	Security
World	PHP
Archive File

Source Code

Here is a simple, yet effective, solution for avoiding SQL Injections.

Let's see a SQL Injection vulnerable sentence:
$r = mysql_query("SELECT * FROM s WHERE id = ".$_GET['id']."");

And the solution:
$r = mysql_query("SELECT * FROM s WHERE id = UNHEX('".bin2hex($_GET['id'])."')");

By converting the var in php, and reconverting it in the SQL sentence there's no chance to inject code.


tehwebmaster.blogspot.com / logikk.com.ar