ReachCustomersOnline.com

Preventing SQL Injection Attacks

Posted by TimSlavin at June 16, 2004

"In a previous article we provided some examples of how intruders will try to attack your site using Cross-site Scripting (XSS) attacks. In an XSS attack, the attacker tries to use client-side methods of injecting client-side script and then high-jacking a user's session. Now, we're going to provide some examples of a server-side attack where an intruder will try to obtain information from within your database. After the examples, we will go through methods of securing your code against these types of attacks."

Good article about an esoteric (but common) kind of online attack and how to prevent it. From WWW Coder. In the past two years, at least one big ecommerce website was trashed this way (my earlier story here).

Trackback Pings

TrackBack URL for this entry:
http://www.reachcustomersonline.com/cgi-bin/mt/mt-tb.cgi/1315

Comments

Post a comment

Name:

Email Address:

URL:
Remember Me? YesNo

Comments: