Jump to content
UBot Underground

kate

Members
  • Content Count

    35
  • Joined

  • Last visited

  • Days Won

    2

Posts posted by kate

  1. Hi

     

    Is there any command in ubot studio 5 to sanitize SQL Query ?

     

    I cant find it in current Ubot(5.9.33). I think its crucial feature that missing from database command (if its true there's no feature like this).

    Simple regex to replace " ' " is not adequate, 

    Here is why: 

    http://stackoverflow.com/questions/8506574/sql-injection-isnt-replace-good-enough

     

    Workaround i can think of:

     

    1. Develop plugin to do this ("escape sql" command, or better, parameter binding.)

    2. Using python to sanitize

    3. Using php to sanitize

    4. Using online database

     

     

    All database that ubot studio 5 supported need this feature.

    1.  SQLLite currently has problem )

    2. There is open issue about this

×
×
  • Create New...