laurent22/so-sql-injections
View on GitHub ↗ ★ 177 PHP
SQL injection vulnerabilities in Stack Overflow PHP questions
5 mentions on Hacker News by 5 people: 0 stories, 5 comments · first 2016-12-04 · latest 2021-07-25
20082026
-
Yes it's not 100% accurate but still gives a good approximation. See there for more info https://github.com/laurent22/so-sql-injections/issues
comment by laurent123456 · 2021-07-25 · in Google results for PHP tutorials contain SQL injection vulnerabilities -
Found the regex's being used: https://github.com/laurent22/so-sql-injections/blob/master/s... It's pretty basic. For UPDATE, it's matching anything with UPDATE followed by SET, followed by a dollar sign+alphanumeric And, it's specifically…
comment by tyingq · 2016-12-04 · in SQL injections vulnerabilities in Stack Overflow PHP questions -
That's what happens when you use Regexes to find problems: https://github.com/laurent22/so-sql-injections/blob/7b9d99c0...
comment by DCoder · 2016-12-04 · in SQL injections vulnerabilities in Stack Overflow PHP questions -
…the author seems to be flagging injections based on the use of a PHP variable in the query string ( https://github.com/laurent22/so-sql-injections/blob/master/s... ). Although a strong indicator, this does not necessarily imply an SQLi. If…
comment by jorkro · 2016-12-04 · in SQL injections vulnerabilities in Stack Overflow PHP questions -
…but doesn't automatically mean SQL injection vulnerable. And this is not limited to PHP [1] https://github.com/laurent22/so-sql-injections/issues/1
comment by sschueller · 2016-12-04 · in SQL injections vulnerabilities in Stack Overflow PHP questions