SQL injection
This time I will tell you a little about sql injection I am studying . I learned to direct practice in DVWA ( Damn Vulnerable Web Applicaion ) . I started from a low level , and here are the php syntax that must be injected : " <?php if(isset( $_GET [ 'Submit' ])){ // Retrieve data $id = $_GET [ 'id' ]; $getid = "SELECT first_name, last_name FROM users WHERE user_id = ' $id '" ; $result = mysql_query ( $getid ) or die( '<pre>' . mysql_error () . '</pre>' ); $num = mysql_numrows ( $result ); $i = 0 ; while ( $i < $num ) { $fir...