Over a million developers have joined DZone.
{{announcement.body}}
{{announcement.title}}

Hardening PHP: SQL injection - Complete walkthrough

DZone's Guide to

Hardening PHP: SQL injection - Complete walkthrough

Free Resource

Get the senior executive’s handbook of important trends, tips, and strategies to compete and win in the digital economy.

Below are the slides from the presentation I gave on SQL injection at last year's OWASP Poland Chapter meeting. The materials teach how to use prepared statements, how to escape and write secure stored procedures. Many PHP projects are covered - PDO, Propel, Doctrine, Zend Framework and MDB2. Multiple gotchas and caveats are included. I discuss why escaping is usually the wrong choice, which practices to avoid or follow and how stored procedures sometimes offer no protection at all.

I tried to make this as complete as possible, so a PHP developer could learn how to protect his applications no matter what framework / database he uses.


English version


Read this guide to learn everything you need to know about RPA, and how it can help you manage and automate your processes.

Topics:

Published at DZone with permission of Krzysztof Kotowicz , DZone MVB. See the original article here.

Opinions expressed by DZone contributors are their own.

{{ parent.title || parent.header.title}}

{{ parent.tldr }}

{{ parent.urlSource.name }}