Template:SQL injection alert/doc
From MediaWiki.org
 |
This is a documentation subpage for Template:SQL injection alert (see that page for the template itself). It contains usage information, categories, interlanguage links and other content that is not part of the original template page. |
Template:SQL injection alert/doc
- Description
- Adds an alert box describing a SQL injection vulnerability in including Extension page. Also adds including page to Category:Extensions with SQL injection vulnerabilities
- If your extension was tagged with this template please read
- For extension developers and extension users: SQL injection
- Specifically for extension developers: Security for developers
- Example
{{SQL injection alert|~~~~}}
- Creates
 |
WARNING: the code or configuration described here poses a major security risk.
Problem: Vulnerable to SQL injection attacks, because it passes user input directly into SQL commands. This may lead to user accounts being hijacked, wiki content being compromised, private data being leaked, malware being injected, and the entire wiki content being erased, among other things. |
