素包子

现在xss更流行了,但sql注射显然还是一个不容忽视的问题.

在用mod_security作过滤的时候,会遇到如下两个麻烦:

1:你到底是否扫描post操作的东西?

2:攻击者给你把攻击语句模糊拆分了能搞定吗?

这个greenSQL不知道是否有帮助,他是在数据库前面的,不知道保护是否会更贴心,有空了弄一下吧,这东西用的libevent,对了,这东西还有一个web interface console demo在 http://demo.greensql.net/login.php

GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works in a proxy mode and has built in support for MySQL. The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL is distributed under the GPL license

http://www.greensql.net/

包子猜您可能还喜欢下列文章：

1. Protecting your MySQL database from SQL injection attacks with GreenSQL
2. Medusa Parallel Network Login Auditor
3. lighttpd 1.5.x安装过程
4. 数据库转换工具箱
5. 自动恢复MySQL数据库的日志文件全教程 zz