douhuireng4407 2013-12-06 17:22
浏览 60

如何将ENCRYPT函数插入MYSQL代码中

Been experimenting trying to get the ENCRYPT function to work in PHP code for sending data to a database. I want it to encrypt the password but i'm not quite sure of the syntax. So far i've got this but its obviously wrong?

('$_POST[username]','$_POST[productId]','ENCRYPT( '$password' )','$_POST[description]')";
  • 写回答

1条回答 默认 最新

  • dongsou4301 2013-12-06 17:28
    关注

    It's not working because you're not concatenating the strings with ..

    'ENCRYPT( ' . $password . ' )'
    

    Plus, who knows if you should be escaping those quotes with \ or not, since you didn't show the beginning of your string in your code.

    Don't bother though... your code is incredibly insecure and wide open to SQL injection attacks. Use prepared/parameterized queries with PDO or similar, or you will be hacked without doubt. Also, don't use encryption on these passwords... uses hashes with salts, which are one-way functions.

    评论

报告相同问题?

悬赏问题

  • ¥15 用windows做服务的同志有吗
  • ¥60 求一个简单的网页(标签-安全|关键词-上传)
  • ¥35 lstm时间序列共享单车预测,loss值优化,参数优化算法
  • ¥15 基于卷积神经网络的声纹识别
  • ¥15 Python中的request,如何使用ssr节点,通过代理requests网页。本人在泰国,需要用大陆ip才能玩网页游戏,合法合规。
  • ¥100 为什么这个恒流源电路不能恒流?
  • ¥15 有偿求跨组件数据流路径图
  • ¥15 写一个方法checkPerson,入参实体类Person,出参布尔值
  • ¥15 我想咨询一下路面纹理三维点云数据处理的一些问题,上传的坐标文件里是怎么对无序点进行编号的,以及xy坐标在处理的时候是进行整体模型分片处理的吗
  • ¥15 一直显示正在等待HID—ISP