itSpice















SQL injection

Web 2.0 Security Testing – Approach Note

Author: Somnath Guha Neogi
Introduction:
Web 2.0 can be defined as the evolving trend of www technologies and web design that aim to enhance creativity, communications, secure information sharing, collaboration and functionality of the web1. 0. In contrast to the static nature of Web 1.0, Web 2.0 systems rely heavily upon user generated content. In fact, Web [...]


SQL Injection Protection in PHP With PDO

By Loukas Kalenderidis
Database abstraction layers like PHP’s Portable Data Objects (PDO) are not a new concept, but a lot of developers don’t seem to realise the security benefit they’re getting for free by using them – inherent protection against SQL injection.
SQL injection is the buffer overflow of the web application world – it’s been around [...]


SQL Injection and Prevention Techniques

What is SQL Injection?
SQL injection is a technique that exploits a security vulnerability occurring in the database layer of a web application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is [...]