Results 1 to 2 of 2

Thread: SQL Injection, Security Concern

  1. #1
    Thread Starter
    Member imomin's Avatar
    Join Date
    Aug 2010
    Location
    United States
    Posts
    78
    Thanks
    3
    Thanked 1 Time in 1 Post

    SQL Injection, Security Concern

    I got a hit to my site with following URL parameters.

    ?cat=999+UNION+SELECT+null,CONCAT(666,CHAR(58),use r_pass,CHAR(58),666,CHAR(58)),null,null,null+FROM+ wp_users+where+id=1/*

    To me it looks like somebody is try to do sql injection. I was wondering classipress is secured and prevent crosssitescripting (XXS) and sql injection as shown above.

  2. #2
    jomarkosabel's Avatar
    Join Date
    Mar 2009
    Location
    Philippines
    Posts
    40,997
    Thanks
    170
    Thanked 3,409 Times in 3,280 Posts
    You must be an AppThemes customer and logged in to view this response. Join today!
    Please help our moderating team work more efficiently by not sending us support questions via PM. You can read more about how AppThemes support works here. However, you can send a PM to follow up and remind me if I missed your support request/thread.

    Thank you and have a nice day.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. /.git/config - Is there a concern
    By realestateguy100 in forum Help Using ClassiPress
    Replies: 0
    Last Post: May 25th, 2010, 08:19 PM
  2. User account locked-security reasons
    By annvk in forum Help Using ClassiPress
    Replies: 7
    Last Post: April 24th, 2010, 09:00 PM