Postgresql cheat sheet blind sql injection functions

ADO.NET framework, 373–374
OleDbClient, 375
HTML5 browser storage
Web SQL Database specification, 378
Web Storage Specification, 379
Java
hibernate, 373
JDBC framework, 372
mobile apps
Android applications, 378
iOS applications, 377–378
PHP
data objects, 376
PDO package, 376–377
PL/SQL, 377
pattern-matching filters, 340–341
payment card industry data security standards (PCI-DSS), 402–403 PHP applications
$input variable, 108, 109
$sql variable, 107
awk function, 105
grep strings, 106

mssql_execute( ) and odbc_prepare( ), 105–106
user-controlled data, 108, 109
platform-level defenses
Application Intrusion Detection Systems (IDSs), 424–425 Aspect-oriented Programming (AOP), 424
database firewall, 425
intercepting filters
application filters, 420–421
filter pattern, scripted languages, 421–422
filtering web service messages, 422
web server and application filters, 417–420
non-editable versus editable input protection, 422
runtime protection technologies and techniques
code changes, 410
Commercial off-the-shelf (COTS) applications, 410 URL/page-level strategies
HTTP Handler configuration, 423
page overriding, 423
resource proxying/wrapping, 424
substitute servlet configuration, 423
URL rewriting, 423–424
web application firewall (WAF), 411–417