<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Online Security Blog (OSB) &#187; Hackproof How To</title>
	<atom:link href="http://onlinesecurityblog.info/category/hackproof-how-to/feed/" rel="self" type="application/rss+xml" />
	<link>http://onlinesecurityblog.info</link>
	<description>Online Security, Safety, Tips, Compliance, Standard</description>
	<lastBuildDate>Sun, 27 Mar 2011 13:07:20 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Oracle SQL Injection Cheat Sheet</title>
		<link>http://onlinesecurityblog.info/oracle-sql-injection-cheat-sheet/</link>
		<comments>http://onlinesecurityblog.info/oracle-sql-injection-cheat-sheet/#comments</comments>
		<pubDate>Tue, 02 Feb 2010 16:01:03 +0000</pubDate>
		<dc:creator>Tokwear</dc:creator>
				<category><![CDATA[Hackproof How To]]></category>
		<category><![CDATA[Tips]]></category>

		<guid isPermaLink="false">http://onlinesecurityblog.info/?p=320</guid>
		<description><![CDATA[http://pentestmonkey.net/blog/oracle-sql-injection-cheat-sheet/ Version SELECT banner FROM v$version WHERE banner LIKE &#8216;Oracle%&#8217;; SELECT banner FROM v$version WHERE banner LIKE &#8216;TNS%&#8217;; SELECT version FROM v$instance; Comments SELECT 1 FROM dual &#8212; comment &#8211; NB: SELECT statements must have a FROM clause in Oracle so we have to use the dummy table name &#8216;dual&#8217; when we&#8217;re not actually selecting]]></description>
		<wfw:commentRss>http://onlinesecurityblog.info/oracle-sql-injection-cheat-sheet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Protecting PHP and MySQL from SQL Injection</title>
		<link>http://onlinesecurityblog.info/protecting-php-and-mysql-from-sql-injection/</link>
		<comments>http://onlinesecurityblog.info/protecting-php-and-mysql-from-sql-injection/#comments</comments>
		<pubDate>Thu, 29 Oct 2009 16:28:36 +0000</pubDate>
		<dc:creator>Tokwear</dc:creator>
				<category><![CDATA[Hackproof How To]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[SQL Injection]]></category>

		<guid isPermaLink="false">http://onlinesecurityblog.info/?p=108</guid>
		<description><![CDATA[1) NEGATIVE INPUT FILTERS The simplest way to prevent this sort of injection is to search the SQL string for semi-colons and double dashes, and remove them before passing the statement to the database. That&#8217;s easy in an adequate application language, for example in PHP: $protectedqry = str_replace( &#8220;&#8211;&#8221;, &#8220;&#8221;, str_replace( &#8220;;&#8221;, &#8220;&#8221;, $qry ));]]></description>
		<wfw:commentRss>http://onlinesecurityblog.info/protecting-php-and-mysql-from-sql-injection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

