PDA

View Full Version : PHP & Mysql injection in phplist


ktsirig
11-07-2006, 01:11 PM
Hello all,
I want to secure a page which uses the script of "phplist". Basically this script stores username, name, surname, email etc of users in order for the company to send newsletters to their clients.
Except from stripping slashes,backslashes etc or special characters, are there any other ways to prevent the data stored in the db from somenone that wants to "lay their hands" on them?

Thank you!

Vege
11-07-2006, 01:32 PM
Give the user that query's the data from the database only those rights he needs.
like SELECT only or INSERT only database accounts if yout building the system to location where you can handle those.

But i guess your pretty safe what you have at the moment.