Changing jos_ table prefix - worthwhile, problematic? - Joomla! Forum - community, help and support
hi
if understand logic correctly, changing table prefix hinder scriptkiddies trying compromise site pasting sql injection parameters url. so, example, if paste sql piece alters admin username, fail because sql statement assumes jos_users, in fact sdrg_users.
my first question whether makes significant improvement security.
my second question whether causes problems. example, there have extensions out there poorly coded, , assume table names start jos_
comments, thoughts?
thanks
brendon
if understand logic correctly, changing table prefix hinder scriptkiddies trying compromise site pasting sql injection parameters url. so, example, if paste sql piece alters admin username, fail because sql statement assumes jos_users, in fact sdrg_users.
my first question whether makes significant improvement security.
my second question whether causes problems. example, there have extensions out there poorly coded, , assume table names start jos_
comments, thoughts?
thanks
brendon
i can't see point. if situation can inject sql code, inject "show tables" , know names of tables. extensions hard wire jos_ not written using standard framework question using them anyway. beg question how know without looking through code.
Comments
Post a Comment