|
-
Mar 19th, 2008, 02:47 PM
#1
Thread Starter
New Member
PHP MYSQL page
i m new to php and MySQL, I just installed LAMP, and looking for a php page connecting with MySQL, basically i would like to see that how sql injection work and if i turn off the safe mode, then how we can effect on database....Please let me know where i can get this small program of PHP page with MySQL and how to install that on my LAMP.
Regards
-
Mar 19th, 2008, 11:23 PM
#2
Re: PHP MYSQL page
SQL injection is when you have user submitting data and they submit some SQL or PHP that will disrupt the SQL query in the code and cause it to either show the data, or change the data.
I dont know what you mean by safe mode, but you may want to keep that on.
There should be a link in my signature for installing a LAMP server.
EDIT:
here is a link on How To install LAMP, my link is for windows:
http://lamphowto.com/
My usual boring signature: Something
-
Mar 20th, 2008, 02:11 AM
#3
Thread Starter
New Member
Re: PHP MYSQL page
Thanks for prompt reply.
Actually i already installed LAMP,and now looking a simple php page with Mysql database linked. So then i will try to hack that database and then i will start working to secure it through php safemode on and Mod Security etc.
so basically i just need a PHP page code, which has MySQL database, so then i can start gaining experience working on it...Hope you understand and help me out...Thanks again
-
Mar 20th, 2008, 02:49 AM
#4
Re: PHP MYSQL page
Safe mode does nothing to guard against SQL injection vulnerabilities.
-
Mar 20th, 2008, 03:05 AM
#5
Thread Starter
New Member
Re: PHP MYSQL page
might be u r right. Well, can you please let me know where i can get any simple php page with Mysql database connected.....so i start working on it and see how Mod security will work. thanks
-
Mar 20th, 2008, 03:53 AM
#6
Re: PHP MYSQL page
http://uk.php.net/mysql
Have a look at about a third of the way down and you will see some code which you can use to make a connection to a MYSQL server. If you are using PHP 5 then I suggest you look at PDO_Mysql instead or mysqli which both support the use of parametrized queries.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|