Also, are there more ways to break into a site? if so, can you be completely immune to those too?
Thanks.
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I think the only safe way to answer a question so vague is to say NO! You cannot be immune since there is always a way, even if you have to be Ethan Hunt to figure it out.
Even if you can’t be affected by injection, you are not safe from other ways to attack a database – since you didn’t exclude things like host admins, corrupt people, standard links to mysql admin and guessing passwords, etc.
You can be paranoid and go through all the ropes to be as secure as possible, but with good backups and logs you can revert if something tears you up on the odd occasion. Of course, such a lackadaisical statement loses its value as the scale of your site grows. But for the everyday guy – at least the guy at the level where he is asking this kind of question – you’re probably safe with basic provisions. Most frameworks have input escaping to help prevent badness, but it only goes so far.
Just don’t get into banking software until you know how to answer this question on your own.