How to solve MCAFEE Vulnerability

Discussion in 'Programming' started by joe_mat, Jul 27, 2009.

  1. #1
    I am having Vulnerability is Mcafee:

    MySQL Database Error Disclosure Vulnerability

    Please suggest how to solve it
     
    joe_mat, Jul 27, 2009 IP
  2. kblessinggr

    kblessinggr Peon

    Messages:
    539
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    0
    #2
    The easiest way to fix it is to turn off any error reporting to the screen (and only into a log file). Since thats mainly what mcafee is bitching about. Basically means that your script somehow can take in malformed data, and either spit out an error to the screen of a failed query or performs the injected action. So even if you turn off error reporting, you'll want to look at your code and sanitize those inputs before putting them thru a SQL query.
     
    kblessinggr, Jul 27, 2009 IP