How to fix Server Status Code: 302 Found by SQL Inject Me Firefox Addon

后端 未结 4 1034
花落未央
花落未央 2020-12-10 07:44

I scanned my login script using SQL Inject Me Firefox addon

According to the Test Results, my script was vulnerable to SQL Injection. Result by example



        
4条回答
  •  情歌与酒
    2020-12-10 08:16

    "// some code" doesn't help much, but the problem may to be with this clean(). Try mysql_real_escape_string() instead.

    Edit: As said above, 302 code means "you are being forwarded". It doens't mean the SQL Injection was sucessfull, as it doesn't mean it wasn't either. In this case you will only know that if you can determine where this 302 is forwarding you, to "admin.php" or "login.php".

提交回复
热议问题