Wow Hacked?

[rhys918]

Can somone Please Give me the most updated or safest anti sql because i use wizkids regpage obc v2 and my database is stilll getting hacked but the hackers only can change the levels and names please provide me with good anti sql and how to use thanks

[MentaL]

[CrashPoint]

[mod]removed .[/mod]

[Trilest]

http://www.gamerzplanet.net/forums/g...ml#post1754118

Can somone Please Give me the most updated or safest anti sql

He was asking of an anti sql script not how to sql inject ..

[Girbicid]

try this

    function escape($string)
        {
        if(ini_get('magic_quotes_gpc'))
            {
            $string = stripslashes($string);
            }
        if(!function_exists('mssql_real_escape_string'))
            {
            $string = mysql_escape_string($string);
            }
            else
            {
            $string = mssql_real_escape_string($string);
            }
        return $string;
        } 

[Guy]

For MSSQL, none of the proposed solutions are safe; rather:

  function sanitizeQuery( $data )
  {
    return( str_replace( "'", "''", $data ) );
  }

The above escapes data being entered as a MSSQL query.

[rhys918]

will this stop injections tho? if not plz post one what does

[Tman151]

Yes rhys918, that will stop many forms of injection.

[Trilest]

For MSSQL, none of the proposed solutions are safe; rather:

  function sanitizeQuery( $data )
  {
    return( str_replace( "'", "''", $data ) );
  }

The above escapes data being entered as a MSSQL query.

You also released an anti-sql that only allowed A-Z a-z and 0-9 right ?
Issn't that one better than replacing the ' ?
I'm just guessing tho.

[Demantor]

Rhys, come msn i will say you what to edit in HG Functions.php :)