PHP Security: SQL Injection

[BladeCT05]

bro... when i seen u put the select code into the sql this whole php came to me. Thanks a lot... now that i seen that... im going to make my site to where when u go to it... u gotta log into any of the pages :) but just like with any programming language, the possiblyities are endless. fuk my english lol.

[12Edix21]

Oh wow that helped me so much to understand whats SQL and how to use it :) THANKS!!!

[IceyArtist]

Yeah this is what I mean. At 00:38. Do you have a video that goes through you creating that script?

[betterphp]

@IceyArtist Sort of, I have one on a user account system.

[MightGuuuy]

admin'># works too

[yourhollisterdude]

inpiut rofl!!

"well u dont need to use this function, (cause its not fucking working right noi) haha

[ti07shadow]

@ 11:00 etc. thats pretty much what I do

made a function to check for magic quotes if its on use stripslashes and real escape, if its off realescape.

[betterphp]

@ti07shadow then your strings should be safe :D

[RawRzCopteR]

"stripslashes($inpiut)" <-- =p

[betterphp]

@RawRzCopteR wondered how long it would take for someone to point that out....

[RawRzCopteR]

typos are your downfall lol...

[betterphp]

@RawRzCopteR I get it right in the end :)

[RawRzCopteR]

@betterphp except in this video LOL

[betterphp]

@RawRzCopteR Correction: I get it right in the end when the code is actually used.

[dashby1969]

tyvid this tutorial then although I have used mres I have still left the door ajar for some nasty code, I have

$query = mysql_query ("SELECT * FROM login WHERE username='$username'");

I am assuming I need to do something there as well to prevent inj?

[betterphp]

@dashby1969 You would have to apply the mres() function to the $username variable, then you should be okay.

[dashby1969]

so if you encrypt using md5 then again you dont need mysql_real_escape_string ()?

Which is better md5 or sha1 or is that just down to choice?

[betterphp]

@dashby1969 no because the original characters are "hidden" in the hash. And sha1() is better, because its longer and more unique, harder to get a string that will produce the same hash. To be honest though, either will do as nobody should be able to get to the hashes anyway.