Defending Against A SQL Injection Attack
October 24, 2009 by Bill Hamilton
Filed under Other Rambling Thoughts
One of my sites came under a SQL Injection attack today. The attacker used the following to attempt to attempt access:
/wp/index.php?cat=%2527+UNION+SELECT+CONCAT(666,CHAR(58),user_pass,CHAR(58),
666,CHAR(58))+FROM+wp_users+where+id=1/*
I have the SEO Egghead Wordpress Firewall and Lester Chan’s WP Ban plugin, so the notification of an attempt and the ability to block it were quick, but protection began early.
Changing the Admin User
The above [...]
