Banner
Website Security Cross Site Scripting and SQL Injection
This is my site Written by anyone on March 1, 2009 – 11:38 am

 

website securityWith hackers, fraud, worms, and viruses website security is a must. Website security is more important than ever before. Over at Google’s blog you can find a post titled Best practices against hacking. Included in Google’s post are steps for blog, SQL, and webpage security.

Here is an outline of securities measures you should be taking on your website or blog

Website Security Tip 1 – Guarding attacks against SQL Injection. What is anSQL injectionSQL Injection? An SQL injection is a malicious bit of code injected into a web application. It changes the behavior of your SQL database. It can change URL’s, passwords, and registrations. How can you avoid an SQL injection? Below are some SQL injection tips:

Add a layer between a form and the front end of your database. Example – add a PDO extension

cross site scriptingWebsite Security Tip 2 – A new form stealing access to a webpage is call cross-site scripting. What is cross-site scripting. Just like above, malicious code is injected into your webpage versus the SQL database. If you are using an PHP form and easy way to fight against cross-site scripting is to strip the input. You can also encode data to avoid direct cross-site scripting. And again, you can also creating an addition layer between your data and the back end.

If you know of other ways to avoid cross-site scripting or SQL injection please share. Sharing website security should be a common practice.

[Post to Twitter] Tweet This Post  [Post to Yahoo Buzz] Buzz This Post  [Post to Delicious] Delicious This Post  [Post to Digg] Digg This Post  [Post to StumbleUpon] Stumble This Post 

Other Resources

Posted in  

Comments are closed.

affiliate_link HubPages

This site uses affiliate programs which results in a commission to the blog's owner. Affiliate and ad programs used are Google Adsense, Amazon, and Linkshare. Products and services discussed on this site produces revenue for the site owner.