How to avoid Wordpress Remote SQL Injection
June 26, 2008
Wordpress Remote SQL Injection could be a pre-disaster for your Wordpress blog, it has been discovered a SQL Injection vulnerability that allows an attacker to retrieve remotely any user credentials from a vulnerable site, this bug is caused because of early database escaping and the lack of validation in query string like parameters.
Wordpress Remote SQL Injection most likely not a destructive job for your Wordpress blog, they just inject a redirect or iframe to their own page/website. This is a blackhat SEO injection technique that could hurt your website SEO campaign.
To prepare yourself, read some tips below:
- Always check your AWSTATS to determine your suspicious visitor activity.
- Backup your Wordpress files and database weekly incase you need to restore it if needed
- Always update your Wordpress instalation to the latest stable version. On the main dashboard, you’ll always see new release information. [Read more]
Popularity: 32%




Recent Comments