All rules →
Rules / PHP
SHIELD-PHP-002

SQL injection via mysql_query with user input

criticalPHPCWE-89CVSS 9.8

What it detects

Legacy mysql_query call includes request superglobals or concatenated variables in the SQL string.

How to fix

Migrate to PDO or mysqli with prepared statements and bound parameters.

Scan your repo freeFull documentation
Back to all rules
SHIELD-PHP-002: SQL injection via mysql_query with user input — Zennoxa Shield