Skip to main content

All Questions

Filter by
Sorted by
Tagged with
7 votes
5 answers
855 views

Are SQL Injection vulnerabilities in a PHP application acceptable if mod_security is enabled?

I've been asked to audit a PHP application. No framework, no router, no model. Pure PHP. Few shared functions. HTML, CSS, and JS all mixed together. I've discovered numerous places where SQL injection ...
Austin Smith's user avatar