Re^2: Use PPI to Find SQL Injection Attacks

[Ovid]

in reply to Re: Use PPI to Find SQL Injection Attacks
in thread Use PPI to Find SQL Injection Attacks

Excellent points on the SQL. I like the DBI subclass idea. Can you point me to some examples? I've never tried to do anything like that before.

[jZed]

A minimal DBI subclass can be found here: Interpolate binds into SQL on error - DBI subclassing (possibly not the best example but since I wrote it I knew where to find it :-)). Basically you'd need to redefine execute() to do nothing, and redefine prepare() (in MyDBI::db) to do your injection checking.