Timeline for Is the code prone to SQL injection or to any other kind of threat
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 9, 2020 at 3:00 | history | tweeted | twitter.com/StackCodeReview/status/1226340101153841152 | ||
| Feb 7, 2020 at 16:29 | answer | added | Sam Mason | timeline score: 0 | |
| Jan 29, 2020 at 5:41 | vote | accept | Satish Chandra | ||
| Jan 28, 2020 at 8:12 | history | edited | Mast♦ |
edited tags
|
|
| Jan 28, 2020 at 8:03 | answer | added | slepic | timeline score: 3 | |
| Jan 28, 2020 at 8:00 | comment | added | Satish Chandra | Thank you so much for the information. I will definitely study more about threat model and incorporate things which apply to my code. Once again thank you very much for your quick response... | |
| Jan 28, 2020 at 7:48 | comment | added | Mast♦ | Input validation and prepared statements should, in theory, prevent SQL injection. So if you've done that properly that part is covered. But depending on your app there's also XSS, frame injection, redirection, session troubles, lack of encryption (or poorly executed), passing privileged information as clear text, etc. | |
| Jan 28, 2020 at 7:46 | comment | added | Mast♦ | "if my coding is prone to any SQL injection attack or any other kind of threat" What threats are you protecting against? Protecting a database is like locking up a house. A simple lock will deter some criminals but if they really want to, they will get in. The bigger the threat, the heavier the security. Hence, real security uses a threat model. If you're going to store client information of consumers, you'll have to deal with data protection laws as well. | |
| Jan 28, 2020 at 7:40 | comment | added | Satish Chandra | I did not get what you mean by threat model. I am using php to prepare web service for my android app. This app has some menus one of which is to create a client. I'll be grateful if you can elaborate a bit more on this... | |
| Jan 28, 2020 at 7:24 | comment | added | Mast♦ | What is your threat model? | |
| Jan 28, 2020 at 7:10 | history | edited | πάντα ῥεῖ | CC BY-SA 4.0 |
deleted 24 characters in body
|
| Jan 28, 2020 at 7:10 | review | First posts | |||
| Jan 28, 2020 at 14:42 | |||||
| Jan 28, 2020 at 7:08 | history | asked | Satish Chandra | CC BY-SA 4.0 |