How to prevent SQL injection attacks?

[Bamril]

Any ideas guys? Vids I found on the web are really shallow :mad:

[Dushafur]

Hi Bamril!
Sanitize all your data inputs, not just those specifically required for your SQL query/Database. I may be mistaken but the leading cause of website leaks is currently XXS (Cross site Scripting) the concept is similar to SQL injection and sometimes even more dangerous. On top of sanitizing, you can also use prepared statements instead of just inserting values into the query. Have a look at the article about that in the PT Security blog. This phenomenon is much better explained there :)

[Roden]

Hi Bamril!
Sanitize all your data inputs, not just those specifically required for your SQL query/Database. I may be mistaken but the leading cause of website leaks is currently XXS (Cross site Scripting) the concept is similar to SQL injection and sometimes even more dangerous. On top of sanitizing, you can also use prepared statements instead of just inserting values into the query. But I would recommend you to ask these experts for help https://www.digitalforensics.com/ (https://www.digitalforensics.com/) Because online attacks are becoming more and more complex to handle them on your own.

I guess that these means make sense. Also I would recommend to be careful with HTTPS protocol.