Alternate version:

  • wise_pancake@lemmy.ca
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    13 hours ago

    I just wiped the DB and put it back online again.

    I did fix it, but had to rewrite a lot of the PHP backend, which took a couple days.

    And yes, I did release another website with SQL injection… It was a personal website for my brother and the pagination was vulnerable. I had written a simple CMS for it, but Instead of a password I just generated an obscure URL with completely open access to edit the DB directly.

    The pagination got hacked but I fixed it pretty quickly (by checking the page number was in fact a number).

    Surprisingly the CMS never got hacked before I moved him over to WordPress.

    Younger me learned a lot of web dev lessons the hard way.

    ETA: This was all when I was a teen and I had nobody in my life to teach me these things. I was self taught from a PHP book from the library.