Web security issue help
Raakesh kumar <[email protected]>
| Newsgroups | gmane.user-groups.linux.delhi |
|---|---|
| Message-ID | <CAEid6wGh=Hnb4MV9OwyECkRfP+p5=srYA-ghb+utaMkj7XzR8Q@mail.gmail.com> |
Hi, we have a website http://www.brahmabooks.com which is developed in core php without any framework or anything. Today someone mailed us with few user details saying that he has hacked our system. Now i don't understand how could someone display all details from our database. We have used PHP PDO with parameterized query and have tested against lots of sql injection techniques and found it injection proof. I found that Cookies are not encrypted and are stored in plain data which i have to take care of but is it possible to get table columns and data with this detail? Can someone guide me how can i secure it and how he would have got these details? Thanks -- Regards RAKESH KUMAR http://raakeshkumar.wordpress.com