如何避免对现有代码进行sql注入

Question

There was a mysql injections on my website.It has 1000 of existing php files. From last 6 months , when i code i keep sure the code is injections free.But is there any solution how can i secure the legacy code without changing every file.

Answer 1

It would involve changing all of your exploitable code if it is in each of these files! There are lots of different ways of having a standardized sanitation function or cleaning and filtering input across your website but if each of these pages were written separately and each have exploitable code in them, you will need to correct each of them...