mysql virus/error

Questions about the MySQL, PostgreSQL, and most other databases, as well as using it with PHP can be asked here.

Moderator: General Moderators

Post Reply
fabby
Forum Commoner
Posts: 62
Joined: Tue Feb 15, 2005 1:06 am
Location: Romania
Contact:

mysql virus/error

Post by fabby »

Hi.
I don't know what to do...i have a site with announces, and from day to day disapear data from tables...from all the tables...it disapears categories, announces, etc. Don't know what to do...can you help me, pls?
User avatar
John Cartwright
Site Admin
Posts: 11470
Joined: Tue Dec 23, 2003 2:10 am
Location: Toronto
Contact:

Re: mysql virus/error

Post by John Cartwright »

It sounds more like an insecure script than it is a virus. First and foremost change all of your passwords. The rest is a bit dificult to determine because we've got so limited information. I would suggest going through your scripts and checking for vulnerabilities, such as using unsanitized user input. I.e. you should be using mysql_real_escape_string() on all input in your queries.
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Re: mysql virus/error

Post by Benjamin »

You don't by chance have a public page anyplace where records can be deleted with get requests do you?
fabby
Forum Commoner
Posts: 62
Joined: Tue Feb 15, 2005 1:06 am
Location: Romania
Contact:

Re: mysql virus/error

Post by fabby »

but if it was a hacker, why it didn't delete all from my database?
i don't have a public page where to delete records.

i wil make a test..i will delete the admin pannel for 4-5 days to view if any of my categories is deleting....and i will test the login...because there you can delete some announces..and i will verify if is there a bug....
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Re: mysql virus/error

Post by Benjamin »

Well if google is nailing a page where records can be deleted, and your using GET requests instead of POST, that's probably the issue.
fabby
Forum Commoner
Posts: 62
Joined: Tue Feb 15, 2005 1:06 am
Location: Romania
Contact:

Re: mysql virus/error

Post by fabby »

no, it isn't possible because it have to login :D
User avatar
Inkyskin
Forum Contributor
Posts: 282
Joined: Mon Nov 19, 2007 10:15 am
Location: UK

Re: mysql virus/error

Post by Inkyskin »

If you dont have any validation, google can very easily register/login - this happened to me a few years ago when I was just learning the basics.
Post Reply