Handling methods for SQL injection vulnerability warnings in PHP programs.

Published: 2013-04-03

You can download the PHP protection script: http://downinfo.myhostadmin.net/php360.zip

1. After extracting, upload 360_safe3.php to the directory of the file that will include it.

2. Add protection to the page. There are two methods; choose either one depending on your situation:

a). Add the following code to the page that needs protection:
require_once('360_safe3.php');
This will protect the page against injection and cross-site scripting.
If you want to prevent injection across the entire site, add it to a common file of the website, such as the database connection file config.inc.php!
Add require_once('360_safe3.php'); to include this code.

Common PHP systems and the files to add:
PHPCMS V9 \phpcms\base.php
PHPWIND8.7 \data\sql_config.php
DEDECMS5.7 \data\common.inc.php
DiscuzX2   \config\config_global.php
Wordpress   \wp-config.php
Metinfo   \include\head.php