KnowledgeHub
Questions
Tags
Users
Search
Alex Rivera
|
Logout
Edit Question
Title
Body
On http://www.justinshattuck.com/2007/01/18/mysql-injection-cheat-sheet/?akst_action=share-this , there is a section that claims you can bypass mysql_real_escape_string with certain Asian character encodings Bypassing mysql_real_escape_string() with BIG5 or GBK "injection string" に関する追加情報: the above chars are Chinese Big5 Is this really true? And if so, how would you protect your website against this, if you had no access to prepared statements?
Tags (comma-separated)
Save Edits
Cancel