Protecting your MySQL database from SQL injection attacks with GreenSQL

Posted by Scott_Ruecker on Aug 25, 2008 7:30 PM EDT
Linux.com; By Ben Martin
Mail this story
Print this story

SQL injection attacks can allow hackers to execute arbitrary SQL commands on your database through your Web site. To avoid these attacks, every piece of data supplied by a user on a Web form, through HTTP Post or CGI parameters, or other means, must be validated to not contain information that is not expected. GreenSQL is a firewall for SQL -- it sits between your Web site and MySQL database and decides which SQL statements should and should not be executed. At least that's the idea -- in execution, I found some open doors.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: Linux, MySQL

« Return to the newswire homepage

Subject Topic Starter Replies Views Last Post
Just use stored Procedures tracyanne 4 1,187 Aug 26, 2008 3:22 AM

You cannot post until you login.