mysql PHP mysql admin 011101 APM 1 Client

  • Slides: 49
Download presentation

나쁜놈 mysql

나쁜놈 mysql

해커스쿨 서버 사무실 PHP mysql 넵! admin 011101

해커스쿨 서버 사무실 PHP mysql 넵! admin 011101

APM 1) 문서 요청 Client (Browser) 6) 결과 전송 Web Server (Apache) 5) 실행결과

APM 1) 문서 요청 Client (Browser) 6) 결과 전송 Web Server (Apache) 5) 실행결과 2) 스크립트 실행요청 3) Query PHP Parser 4) Data DBMS (My. SQL) 33

SQL Statements members 테이블에서 id가 ‘멍멍’이고 pw가 ‘ 12345’인 데이터 추출해줘 – SELECT *

SQL Statements members 테이블에서 id가 ‘멍멍’이고 pw가 ‘ 12345’인 데이터 추출해줘 – SELECT * FROM members WHERE id=‘멍멍’ AND pw=‘ 12345’

SQL Statements members 테이블에서 id가 ‘sehkmg’이고 pw가 ‘ 54321’인 데이터 삭제해줘 – DELETE FROM

SQL Statements members 테이블에서 id가 ‘sehkmg’이고 pw가 ‘ 54321’인 데이터 삭제해줘 – DELETE FROM members WHERE id=‘sehkmg’ AND pw=‘ 54321’

나쁜놈 mysql

나쁜놈 mysql

SQL Injection 공격 id=admin, pw=1’ 또는 id=‘admin id=admin, pw=1’ OR id=‘admin members 테이블에서 id가

SQL Injection 공격 id=admin, pw=1’ 또는 id=‘admin id=admin, pw=1’ OR id=‘admin members 테이블에서 id가 ‘admin’이고 pw가 ‘ 1’ 또는 id=‘admin’인 데이터 추출해줘 (SELECT * FROM members WHERE id=‘admin’ AND pw=‘ 1’ OR id=‘admin’)

SQL Injection에 대한 보안 • 첫번째 방법: 추가적 보안 프로그래밍 id=admin, pw=1’ OR id=‘admin

SQL Injection에 대한 보안 • 첫번째 방법: 추가적 보안 프로그래밍 id=admin, pw=1’ OR id=‘admin addslashes(1’ OR id=‘admin); id=admin, pw=1’ OR id=‘admin

SQL Injection에 대한 보안 • 두번째 방법: SQL Statement 수정 SELECT * FROM members

SQL Injection에 대한 보안 • 두번째 방법: SQL Statement 수정 SELECT * FROM members WHERE id=‘admin’ AND pw=‘ 1’ OR id=‘admin’ ‘SELECT * FROM members WHERE id=%s AND pw=%s’, admin, 1’ OR id=‘admin

실습: SQL Injection kroot. yonsei. ac. kr/hcamp

실습: SQL Injection kroot. yonsei. ac. kr/hcamp

SELECT comment FROM chat WHERE id=1

SELECT comment FROM chat WHERE id=1

SELECT comment FROM chat WHERE id=1 OR 1

SELECT comment FROM chat WHERE id=1 OR 1

PHP MYSQL 1 PHP MYSQL ile neler yaplabilirPHP MYSQL 1 PHP MYSQL ile neler yaplabilir
Mysql Php My Admin PHP Dinamik Web SayfasMysql Php My Admin PHP Dinamik Web Sayfas
PHP AND MYSQL PHP and My SQL PHPPHP AND MYSQL PHP and My SQL PHP
PHP ve MYSQL www bilisimogretmeni com MYSQL VeritabanPHP ve MYSQL www bilisimogretmeni com MYSQL Veritaban
CLIENT SEGMENTS CLIENT SEGMENTS CLIENT SEGMENTS CLIENT SEGMENTSCLIENT SEGMENTS CLIENT SEGMENTS CLIENT SEGMENTS CLIENT SEGMENTS
APM Automation Solutions Ltd APM Customer Support TechnicalAPM Automation Solutions Ltd APM Customer Support Technical
APM Setup 15 4 APM Setup 25 5APM Setup 15 4 APM Setup 25 5
CCBHC APM Development Steps to Certification CCBHC APMCCBHC APM Development Steps to Certification CCBHC APM
index php input php regist php logincheck phpindex php input php regist php logincheck php
PHP Intro PHP Webintegrator PHP Baggrund PHP erPHP Intro PHP Webintegrator PHP Baggrund PHP er
PHP AVAudio Visual PHP PHP 20110910 yoya PHPPHP AVAudio Visual PHP PHP 20110910 yoya PHP
php PHP 4 Internals php Andi Gutmans PHPphp PHP 4 Internals php Andi Gutmans PHP
PHP Apa itu PHP PHP singkatan dari PHPPHP Apa itu PHP PHP singkatan dari PHP
Pemrogaman Web PHP PHP PHP akronim dari PHPPemrogaman Web PHP PHP PHP akronim dari PHP
Introduction to PHP HTML HTML PHP PHP phpIntroduction to PHP HTML HTML PHP PHP php
index php input php regist php logincheck phpindex php input php regist php logincheck php
PHP Overview CS 3520 1 PHP PHP PHPPHP Overview CS 3520 1 PHP PHP PHP
MYSQL Php My Admin Int Tinyint Char VarcharMYSQL Php My Admin Int Tinyint Char Varchar
4 PHP Mysql 7 Section 7 1mysqlconnect php4 PHP Mysql 7 Section 7 1mysqlconnect php
PHP DAN MYSQL Pemrogaman Web INTRO Dengan PHPPHP DAN MYSQL Pemrogaman Web INTRO Dengan PHP
4 PHP Mysql 7 Section 7 1mysqlconnect php4 PHP Mysql 7 Section 7 1mysqlconnect php
PHP My SQL Introduction PHP MYSQL As youPHP My SQL Introduction PHP MYSQL As you
UNITIV PHP AND MYSQL PHP and Web FormsUNITIV PHP AND MYSQL PHP and Web Forms
1 NOKIA Nokia 011101 pptNokia NetworksSverre Natvik Public1 NOKIA Nokia 011101 pptNokia NetworksSverre Natvik Public