Thread: mySQL injection

Can anyone help, I have a hacker causing untold problems in my database. I am using a bought script whch has numerous security features, which are all useless because the hacker is making the changes directly in the database...

Is there any kind of security that can prevent any other access other than from localhost. I'm desperate now and if this can't be resolved then I'm pulling the site and going to have to work offline.

Please... any help or suggestions.

Peter-
I would suggest that you hop on over to the php portion of Programmers Talk forum. They are very helpful.

http://programmingtalk.com/

Just scroll down to php (I assume that is your script) and describe the problem and post some of the script. Describe exactly what changes the hacker is making.

Good luck,

Andy

If the script is weak and exploitable, I would get rid of it asap.