Abuse Melding

Je hebt een klacht over de onderstaande posting:

03-01-2012, 17:24 door Anoniem

For preventings these attacks implement a web application firewall such as mod_security, Urlscan etc.. and deny commands like dEClaRe VaRchaR SELECT InSerT and - Lock down your system views so they cannot be accessed by your website logons. - Put all your CUD (create, update, delete) statements in stored procs with execute permission and then only grant your website logon select permission. - Use parametrised queries instead of string concatenation to build SQL statements. - Sanitise all input parameters used for SQL that are submitted from your website. - Create some simple ISAPI rules to forward requests like these to 403 error pages. - Ensure any error messages are hidden from your website users.

Beschrijf je klacht (Optioneel):

captcha