Security Basics mailing list archives

Re: Test for SQL Injection

From: "Yuli Stremovsky" <stremovsky () gmail com>
Date: Tue, 28 Oct 2008 00:16:49 +0200

Hello Michael

You can use some open source tools that can protect from SQL injection attacks.
For example modsecurity and GreenSQL.

Any of such tools will not give your 100 % protection if you do not
follow principles of secure coding.

Best regards,
Yuli

---
http://www.greensql.net/

On Sun, Oct 26, 2008 at 8:59 PM, Michael Condon
<admin () singulartechnologysolutions com> wrote:


What are some open source utilities I can use to test a web page for SQL Injection vulnerability (MySQL), and what 
coding practices can be implemented to prevent the exploit?




--
http://www.kyplex.com/

Current thread:

Re: Web Application Scanners, (continued)
- Re: Web Application Scanners Franck Vervial (Oct 24)
  - Re: Web Application Scanners Michael Condon (Oct 24)
    - Re: Web Application Scanners Marc-André Laverdière (Oct 29)
    - Re: Web Application Scanners p4ssion (Oct 29)
- RE: Web Application Scanners degracia.carron.joseangel () servexternos repsolypf com (Oct 24)
- Re: Web Application Scanners Sebastián Bortnik (Oct 24)
  - Test for SQL Injection Michael Condon (Oct 27)
    - Re: Test for SQL Injection Adriel Desautels (Oct 27)
    - Re: Test for SQL Injection Nikhil Wagholikar (Oct 27)
    - RE: Test for SQL Injection David Crandell (Oct 27)
    - Re: Test for SQL Injection Yuli Stremovsky (Oct 28)