RE: Different Ways to Identify SQLi 07-02-2015, 02:44 AM
#2
Nice.
This is the real take away here. If you're not using mysqli_real_escape_string() by now quit making web applications forever.
(07-02-2015, 02:27 AM)nothing.nobody Wrote: BIG NOTE: ALL OF THIS CAN BE SHOT DOWN WITH intval() and/or mysql(i)_real_escape_string()
Thanks for reading, hope you found this useful.
This is the real take away here. If you're not using mysqli_real_escape_string() by now quit making web applications forever.




![[+]](https://sinister.li/images/modern/collapse_collapsed.png)