Comments on: United Nation’s Website, Hacked

By: st3chk0v

st3chk0v — Sat, 13 Dec 2008 05:10:02 +0000

well,, why they dont try to hack NSA xD… they will be on the headlines im sure…

By: Jan from thrusites design

Jan from thrusites design — Thu, 30 Aug 2007 10:26:58 +0000

Hm, I do not think that WP is vulnerable. You can avoid SQL injection when using few php functions properly (and yes, WP do use them).

Simple htmlspecialchars(), addslashes() – for input, strip_slashes() – for output make it very easy.

BTW, modify your php.ini so it won’t show any error and use @ before every potentially vulnerable function so that the output (returned error or so) won’t be shown on user’s display. This is helpful for mysql_query functions especially.

By: SELaplana

SELaplana — Mon, 13 Aug 2007 13:23:32 +0000

that’s what really I was thinking. and it reminds me of my 1999 life…. playing other websites by hacking them….

By: Elizar

Elizar — Mon, 13 Aug 2007 12:07:15 +0000

whoever that hackers are, they are good!

It’s The UN we’re talking about here, I assume they have the most tight security there is… apparently they need to do better.