Dedecms built-in Mysqlids (80sec)

DeDecms is a widely used cms software in China. In earlier versions, security issues such as SQL injection were gradually exposed, and SQL injection was the main security issue. To solve the problem of SQL injection, DedeCms included 80 sec Mysqlids in its latest version and patch to defend against and detect SQL injection vulnerabilities. Mysqlids, as an ids, exists between php applications and database operations. It uses the Mysql syntax to analyze the executed SQL statements instead of using the traditional keyword detection method. After proper deployment, there are basically no false positives. Some abnormal SQL statements can be blocked and related information can be recorded, so that the injection vulnerability in the program can be quickly located to provide necessary information for timely vulnerability repair. The detection of Mysqlids is implemented in php. Compared with SQL statements, the time consumed is very small. The rational deployment of Mysqlids can greatly improve the program security. DeDecms Official Website: http://www.dedecms.com have any questions and suggestions welcome to contact root # 80sec.com :)