Will Fitch’s Blog

SQL injection is increasingly becoming a problem for developers, especially PHP. This tutorial will give some insight into what SQL injection is, and how simple it is to protect your code from it.

SQL injection is a security vulnerability that occurs in the database layer of an application. Its source is the incorrect escaping of variables embedded in SQL statements. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.

Read the rest of this entry →