Jump to content
  • 0

SQLI


rans

Question


  • Group:  Members
  • Topic Count:  104
  • Topics Per Day:  0.02
  • Content Count:  429
  • Reputation:   60
  • Joined:  08/19/12
  • Last Seen:  

Can anyone please help me? i want to prevent my sql from being attack.. it always happen to me.. even if i backup everyday my sql... but they can still erase my sql... pls help me how to prevent... thnx 

Link to comment
Share on other sites

5 answers to this question

Recommended Posts


  • Group:  Members
  • Topic Count:  104
  • Topics Per Day:  0.02
  • Content Count:  429
  • Reputation:   60
  • Joined:  08/19/12
  • Last Seen:  

Can anyone please help me? i want to prevent my sql from being attack.. it always happen to me.. even if i backup everyday my sql... but they can still erase my sql... pls help me how to prevent... thnx

Edited by Brian
*merged duplicate topics
Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  21
  • Topics Per Day:  0.01
  • Content Count:  182
  • Reputation:   22
  • Joined:  12/30/12
  • Last Seen:  

Check your MySQL privileges and accounts, maybe someone has access to an account that shouldn't be. Try to change yoaur password too.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  104
  • Topics Per Day:  0.02
  • Content Count:  429
  • Reputation:   60
  • Joined:  08/19/12
  • Last Seen:  

i already did this but still they can get in to my sql files and delete all files :(  
they called the attack "SQL injection" .. ??

Link to comment
Share on other sites


  • Group:  Forum Moderator
  • Topic Count:  93
  • Topics Per Day:  0.02
  • Content Count:  10015
  • Reputation:   2348
  • Joined:  10/28/11
  • Last Seen:  

reconfigure your SQL setting ? like changeusername and password...restrict all unescessary access to your SQL database.

recheck all your files that can connect to SQL.

Link to comment
Share on other sites


  • Group:  Members
  • Topic Count:  3
  • Topics Per Day:  0.00
  • Content Count:  707
  • Reputation:   168
  • Joined:  01/26/12
  • Last Seen:  

Hi assasi91,

 

I am not sure why you are calling this a MySQL injection; it is obvious that it is not. It looks as if you're simply just not properly securing the users/privileges, and that the intruder is abusing that.

 

What is MySQL Injection?

http://www.tizag.com/mysqlTutorial/mysql-php-sql-injection.php

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...