Hackademix reported that the United Nation’s official website was hacked and defaced. The hacker gained access to the said highly profiled website by simply using the technique called, “SQL injection”.

What is SQL injection?

According to the wikipedia, “SQL injection is a security vulnerability that occurs in the database layer of an application. Its source is the incorrect escaping of variables embedded in SQL statements. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another”. E-Government has the clearer definition of it which means, that it is the “name for a general class of attacks that can allow nefarious users to retrieve data, alter server settings, or even take over your server if you’re not careful. SQL injection is not a SQL Server problem, but a problem with improperly written applications”.

It’s a kind of attack which my Ka Webspy’s Guestbook experienced last June 2005 and similar attacked used to hack the Pinoy Bloggers Directory on December 2005.

The United Nation website’s Hacker

According to the BBC, the said attack was called “cyberprotest” and hackers using this name are said to be coming from Turkey and called themselves, “Turkish Defacer”.

As of writing this post, these hackers have attacked many websites already.

What’s the lesson?

Well. This simply tells us that we need to be vigilant. Since most of us bloggers are using the Wordpress blogging engine in running our blogs, so we must upgrade immediately our Wordpress installation soon as the new version is released in order to avoid such attack.

• Sign up for PayPal and start accepting credit card payments instantly.
  As the world's number one online payment service, PayPal is the fastest way to open your doors to over 150 million member accounts worldwide.
• Promote your product to high quality, targeted websites and blogs.
  Find effective, influential blogs and highly targeted audiences to advertise.Choose to display your ad across entire blog networks to maximize your exposure to a wide audience.