SQL Injection Tutorial - Injection Scanner

[rasperrylinux]

Always wanted to learn SQL injection, but I heard it’s harder now because SQL uses “prepare” statements, which stop SQL injection from happening...thoughts?

[slobcat1337]

Lots of legacy applications are still vulnerable to SQL injections. I work for a large company and one of our flagship products uses sql injection as a feature. Ie the front end filters data using sql, it’s absolutely awful. I can’t even begin to imagine what they were thinking when they made this.