Does Your Website Need a Check-up?
Friday, June 6th, 2008 by Joey SeichYou cringe as you open the company website and are greeted by a number of rapidly flashing images. You click and the page explodes into kaleidoscopic text that pulsates with different colors. The phone rings and your e-mail dings, but you already know what they are going to say: The company site has been hacked. This is a corporate nightmare and to think…it all could have been avoided.
There is no question that a hackers’ post can easily ruin a perfectly good day. And it never fails to amaze my clients that their 24-7 billboard to the world is so widely visible. The smallest company can be inundated by phone calls when a security breach takes place. SQL Injection is one of the many web attack mechanisms used by hackers to gain access to the data held within your database.
SQL Injection allows a hacker to pass SQL commands (statements) through a web application for execution by the backend database. If not setup properly, SQL Injection attacks allow hackers to view information from the database and/or even wipe it out. Older sites that take advantage of dynamic scripting languages, such as ASP, PHP, JSP, and CGI are especially vulnerable. A hacker merely needs a web browser, knowledge of SQL queries and creative guesswork to wreak havoc. (more…)

