MySQL Injected.. Help.. questions!

Discussion in 'MySQL' started by bnbn1382, Nov 19, 2009.

  1. #1
    I think I had an recent attack similar to this:
    http://www.vupen.com/english/advisories/2007/2410
    Not sure, but some kind of an attack similar.

    And my MySQL database is youkn0_game.

    Would SQL injection affect the whole MySQL database? or just the one that was injected ( youkn0_game )
    Would files be affected? like html / php etc.

    If I restore youkn0_game database, would it be fine? Or would I have to restore whole site folder? or the whole youkn0_ databases?
     
    bnbn1382, Nov 19, 2009 IP
  2. mastermunj

    mastermunj Well-Known Member

    Messages:
    687
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    110
    #2
    SQL Injection can cause little mischief to disasters.

    Always sanitize variables before using them in query.

    in php, you can use mysql_real_escape_string for achieving the same.

    You are the best person to determine what damage has happened to your database, if its only for one row, delete it and if major data is affected then better take backup of current tables and restore from backed up data.
     
    mastermunj, Nov 19, 2009 IP