Slashdot Mirror


SQL Injection Attacks Increasing

An anonymous reader writes "Help Net Security has a story that covers the dramatic increase in the number of hacker attacks attempted against its banking, credit union and utility clients in the past three months using SQL Injection." Article follows up on press release with a little more information. Not a lot here shockingly surprising, but it's worth mentioning that SQL injection is a real pain for web developers. You have to be very careful about checking user input.

1 of 384 comments (clear)

  1. Re:Hooray for PHP! by Goaway · · Score: 1, Offtopic

    Furhtermore, note:

    http://www.google.com/search?q=sql+perl
    "Results 1 - 10 of about 69,700,000 for sql perl"

    http://www.google.com/search?q=sql+php
    "Results 1 - 10 of about 151,000,000 for sql php"

    http://www.google.com/search?q=%22sql+injection%22 +vulnerability+perl
    "Results 1 - 10 of about 243,000 for "sql injection" vulnerability perl"

    http://www.google.com/search?q=%22sql+injection%22 +vulnerability+php
    "Results 1 - 10 of about 2,170,000 for "sql injection" vulnerability php"

    The ration of pages about SQL in general on PHP and Perl is about 1:2. The ration of pages on SQL injection is about 1:9.

    SQL injection is mainly a problem with PHP, because of the useless design of the database interfaces.