SQL Injections

Are SQL injections mainly done through forms?

Like sign up forms, user logins forms, and etc?

 

SQL injections are mainly done through any data that is sent to your script through $_POST and $_GET. That's why you should always pass all data coming from these sources through mysql_real_escape_string.

 

For complete details visit en.wikipedia.org/wiki/SQL_injection

 

Thanks for that link, it helped me out a lot

 

most of the times yes, though wikipedia gives you a indepth knowledge about it

 

From youtube videos ive seen its threw login.

 

Not only by forms they can use the address bar as well! That's why you should always check any data being sent via $_GET or $_POST.

 

In web always remember this 'All Input Data is Evil'.

 

SQL injections can be attempted through any user input .. A rule of thumb: All data input from the user has to be sanitized ..