Class: class_sql_inject

This class is meant to search in your SQL data values for special characters that may change the meaning of your SQL data and execute actions that may compromise the security of servers.

When some of these suspicious character sequences is found in HTTP POST request values ($_POST), you can:
- Destroy the current session
- Redirect to a new page
- Log the activity

To check the request values do the following:

$bDestroy_session = TRUE;
$url_redirect = 'index.php';
$sqlinject = new sql_inject('./path_to_log.log',$bDestroy_session,$url_redirect);
$sql_inject->test($your_sql_data);

This class requires PHP 4 or later.

Notice: this class recognise only some of the known types of SQL injection methods and so it is not yet ready to deal with all possible ways to perform this kind of attack.

If you know an application of this package, send a message to the author to add a link here.