OK, it may sound ridiculous but this is what happened : I’ve set up

Question

Editorial Team

Asked: June 13, 20262026-06-13T10:08:17+00:00 2026-06-13T10:08:17+00:00

OK, it may sound ridiculous but this is what happened :

I’ve set up a site, fully working, on CodeIgniter
The site is obviously db-driven, with users tables (and many more) in it
Today, I’ve logged in, and in the place of “Name”… instead of the username, I’m seeing "Use PDO" (I’ve also checked the db table, from phpMyAdmin, and the specific field seems to have been altered :S).

And I’m thinking : “Somebody has hacked the site”. Something like a bad (though educational) joke, maybe?

Am I right? (I feel a bit stupid asking that, but whatever…)

If so, what should I do in order to prevent such a thing happening in the future?

Hint : ALL my db access is done using CodeIgniter’s db function, so I suppose everything should have been properly escaped. Any ideas?

You must login to add an answer.

Need An Account,

Editorial Team · Answer 1 · 2026-06-13T10:08:19+00:00

Editorial Team

The issue has been resolved, thanks to @raina77ow.

The Db access had been in a really bad shape, and the (quasi obvious) solution was to start using Prepared statements and Query bindings.

Reference : http://codeigniter.com/user_guide/database/queries.html

The Archive Base Latest Questions