OKdevTV Docs
Home OKdevTV
ESC
↑↓ to navigate ↵ to select ESC to close
owasp 1 min read 0.9 KB Raw Markdown
On this page (2)

SQL Injection

php
$txtUserId = $_GET("UserId");
$txtSQL = "SELECT * FROM Users WHERE UserId = " . $txtUserId;
  • UserId=105;%20DROP%20TABLE%20Suppliers
sql
SELECT * FROM Users WHERE UserId = 105; DROP TABLE Suppliers;

방어법

  • binding
php
$stmt = $dbh->prepare("INSERT INTO Customers (CustomerName,Address,City)
VALUES (:nam, :add, :cit)");
$stmt->bindParam(':nam', $txtNam);
$stmt->bindParam(':add', $txtAdd);
$stmt->bindParam(':cit', $txtCit);
$stmt->execute();
  • escape filter
php
//$sql = "SELECT * FROM SQL_Injection WHERE type='".$_GET['type']."'";
$sql = "SELECT * FROM SQL_Injection WHERE type='".mysql_real_escape_string($_GET['type'])."'";
  • 결과
sql
SELECT * FROM SQL_Injection WHERE type='public\' or 1=\'1'

ref