Hacker GitHub

← All repos

laurent22/so-sql-injections

View on GitHub ↗ ★ 177 PHP

SQL injection vulnerabilities in Stack Overflow PHP questions

5 mentions on Hacker News by 5 people: 0 stories, 5 comments · first 2016-12-04 · latest 2021-07-25

Mentions per year 5 mentions · busiest year 2016 (4)
20082026
  1. Yes it's not 100% accurate but still gives a good approximation. See there for more info https://github.com/laurent22/so-sql-injections/issues
  2. Found the regex's being used: https://github.com/laurent22/so-sql-injections/blob/master/s... It's pretty basic. For UPDATE, it's matching anything with UPDATE followed by SET, followed by a dollar sign+alphanumeric And, it's specifically…
  3. That's what happens when you use Regexes to find problems: https://github.com/laurent22/so-sql-injections/blob/7b9d99c0...
  4. …the author seems to be flagging injections based on the use of a PHP variable in the query string ( https://github.com/laurent22/so-sql-injections/blob/master/s... ). Although a strong indicator, this does not necessarily imply an SQLi. If…
  5. …but doesn't automatically mean SQL injection vulnerable. And this is not limited to PHP [1] https://github.com/laurent22/so-sql-injections/issues/1