Saturday, September 17, 2011

Protecting Your Website Database From Hackers

there is one subject in the technology that many people seem to forget when developing their website. This topic is safety. Many people will create their own web sites and not to forget the importance of computer security when creating your script. This error leads to many problems down the road.


It is surprising how many people are lazy when it comes to securing their sites. Many people are thinking, "Oh, well it can not happen to me, my website is not as big as other websites." It's a terrible way of thinking, and will only lead to your website sjeckan.Česta getting the error in computer security, is forgetting how to protect your database from SQL injection.


SQL injection is something that is very easy for hackers to learn, and is something that many sites forget to guard against. The funny part about it is, protect yourself from SQL injection is quite simple, but so many webmasters to skip it when programming their web scripts.


If a hacker manages to successfully use SQL injection to your website, then they can get access to all your data in databases, and can even destroy data, damage to brand your website. In addition to damages, you may be thinking now, "How can I protect my website from this ?"


Protecting your site from SQL injection is easy. If you're programming with PHP, then all you have to do is use the PHP function mysql_real_escape_string on any variable in SQL queries. This will prevent just about all the injections that hackers will be used. If you really want to be sure, you should also set the permissions of the user database to prevent commands such as DROP TABLE.


Even though you May have used the function to protect your site from the injection, you will also want to encrypt any private, personally identifiable information. In case of any event in which hackers can not break down your defenses and gain access to the data that you want information such as passwords are encrypted so that hackers can not see what they are.


I hope these tips will help you maintain your web scripts protected. Using the simple things such as data encryption and PHP mysql_real_escape_string function will keep your database safe from hackers, many.

0 comments:

Post a Comment