[zinzeur]

Is it possible to do sQl injection against website using prepared statement for querying the database ? thanks for your help

[XxG1izzi3Guzzl3RxX]

its literally called sql INJECTION
just INJECT the " ' " symbol into the query to see if the db is vulnerable

[YesMyDark]

https://overflow.datura.network/question...-injection

[zinzeur]

its literally called sql INJECTION
just INJECT the " ' " symbol into the query to see if the db is vulnerable

thanks but prepared statements are the way to guard against sql injections so it would be useless trying classic injection payloads, what I'm looking is if there are edge cases where injection is possible with some clever way

---

https://overflow.datura.network/question...-injection

thanks a lot , best regards

[joepa]

No, unless there's in bug in the prepared statments code.