OpeL - Nugegoda

03/09/2017

https://www.slwebcreations.com/vps-hosting

SL Web Creations provides Sri Lanka’s best managed VPS hosting with CPanel. Enjoy Linux with Full Root Access, Unlimited reboots, OS reloads with our Next-Gen Virtual Private Servers

03/09/2017

https://www.slwebcreations.com/

SL Web is focused on providing web solutions including web design, ecommerce development, corporate development, web hosting and vps hosting in Sri Lanka

19/04/2017

Professional Website for you, just starting from Rs 5,000 Per Year
• The Perfect Solutions for Small Businesses and Professionals.
• Your own website for a small investment. Starting from Rs 5,000 per year
• Included a Domain name, Web Hosting, Emails & Social Medias

29/04/2015

Secure your Website with SSL.
SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server(website) and a client(Web browser).

29/04/2015

Connect to an FTP server, Download and upload files.
FileZilla is a cross-platform FTP, SFTP, and FTPS client with a vast list of features, which supports Windows, Mac OS X, Linux, and more.

29/04/2015

Hosting administration with WHM/Cpanel
Learn how to use cPanel, from beginner basics to advanced techniques.

28/04/2015

Which is your favorite FTP Client .. we use FileZilla :)

25/04/2015

Targetting "High Speed Tracking System" :P

20/04/2015

13/04/2015

වෙබ් සයිට් එකට නමක් ද? පොඩ්ඩක් මේ ගැනත් හිතන්න.

11/04/2015

Protect SQL Injection that Create a Backdoor to your Web Site

What is SQL Injection?
SQL injection is an attack that allows the attacker to add logical expressions and additional commands to an existing SQL query. This attack can succeed whenever a user submits data that is not properly validated by an application if the data is glued together with a legitimate SQL query.

Let’s look at the example below.
If inputs received for the username and password fields, then the query will be constructed as :
“SELECT username, password FROM users WHERE username=’ ” + username + “ ’ AND password = ‘ ” + password +“ ’ ”;

If an attacker provides ‘or 1=1’ as the username and password
Username: ‘ or ‘1’=’1
Password: ‘ or ‘1’=’1
Then the query will be constructed as:
“SELECT username, password FROM users WHERE username= ‘ ‘ OR ‘1’=’1’ AND password = ‘ ‘ OR ‘1’=’1’”;

The last part “1=1”is always true and the site is vulnerable to sql injection.