This is a quick method to check if your website is vulnerable to mysql injection.

For does of you who leave your page url with your query string looking like *.php?id=//some value or text, obviously are asking to be attacked. You can run a quick test by adding a quote(') to the end of your query string.

EXAMPLE

www.site.com/news.php?id=5 //add a quote(') at the end

Like this :

www.site.com/news.php?id=5'

If you get a mysql error, you have just invited a hacker to your website and he would want to test his hacking skills with your website.

Pretty short though. This is not a tute on how to use sql injection. Next i will post on how to prevent sql injection.

Have fun testing