Re: Numbers Vs. Characters in MySQL Database
>Who cares if someone enters www.site.com/product.php?product=wrongproduct
Would you care if someone deleted all your database, just for fun?
If you don't care, then don't worry about SQL injection.
>I am going to use a Mod Rewrite so there will be no way of knowing what the original URL is, right?
As long as EVERY query string is rewritten, even malformed ones which could be SQL injectiion
Good luck,
Barry.
Subject
Written By
Posted
Re: Numbers Vs. Characters in MySQL Database
June 21, 2011 04:07PM
Sorry, you can't reply to this topic. It has been closed.
Content reproduced on this site is the property of the respective copyright holders.
It is not reviewed in advance by Oracle and does not necessarily represent the opinion
of Oracle or any other party.