Re: Web security issue help

> Hi,
> we have a website http://www.brahmabooks.com which is developed in core
> php without any framework or anything. Today someone mailed us with few
> user details saying that he has hacked our system. Now i don't
> understand how could someone display all details from our database. We
> have used PHP PDO with parameterized query and have tested against lots
> of sql injection techniques and found it injection proof. I found that
> Cookies are not encrypted and are stored in plain data which i have to
> take care of but is it possible to get table columns and data with this
> detail?
> Can someone guide me how can i secure it and how he would have got
> these details?
> Thanks
> 

Hi Rakesh,
First thing I will suggest is change your machine passwords. I am sure you
must have done it by now. Have you? 

Thanks,
Abhishek