Re^2: Use PPI to Find SQL Injection Attacks

Excellent points on the SQL. I like the DBI subclass idea. Can you point me to some examples? I've never tried to do anything like that before.

Cheers,
Ovid

New address of my CGI Course.

Comment on Re^2: Use PPI to Find SQL Injection Attacks

Replies are listed 'Best First'.
Re^3: Use PPI to Find SQL Injection Attacks by jZed (Prior) on Aug 14, 2007 at 19:08 UTC
A minimal DBI subclass can be found here: Interpolate binds into SQL on error - DBI subclassing (possibly not the best example but since I wrote it I knew where to find it :-)). Basically you'd need to redefine execute() to do nothing, and redefine prepare() (in MyDBI::db) to do your injection checking.	[reply]