| |||||||||||
| |||||||||||
Preventing injection attacks and other security lapses
![]()
If you're writing a public facing web site on which you invite your users to enter data,
you need to ensure that a tiny minority of malicious users can't harm your site, nor gain
access to information that they shouldn't be seeing. This is a huge subject that you'll need
to be aware of in order to program to take care of the risks involved. Once you have a good
understanding, you'll easily be able to protect against the most common problems and that
understanding will also help you evaluate and deal with other risks that might be more
application specific too. This illustration shows how you can "sanistise" incoming data
from a web form, and sanitise the output to the browser too. Extra considerations are
required when you're looking to prevent "injection attacks" to an SQL database - and they're
easy enough to look at and deal with once you've considered your overall application design
and strategy.
Show a large image More about security in MySQL Associated topic - Perl - Network Security |
| ||||||||||
PH: 0800 043 8225 or 01225 708225 • FAX: 0845 8382 405 or 01225 707126 • EMAIL: info@wellho.net • WEB: http://www.wellho.net • SKYPE: wellho | |||||||||||