(Not like/about MySQL Injection) I wanna just be confirmed that someone told me
a query can be changed (or) modified (by someone intruder/hacker, from middle) while we submitting it. Is it possible?
I mean, lets say there is a query (fixed Query for sure) in php:
$query = 'SELECT password WHERE id=1';
$result = mysql_query($query);
- Lets say whatever SQLInject or any threats have made, the final
$query(string) will be processed. Right?
(1) Can this query be changed/modified on the way "Submitting" (before reaching to Server)?
(2) Or.. Can
returning result be changed/modified on the way "Returning" (back from Server) ?
So according to his saying, the final
$result we get, will be a wrong one against what we really queried (even the real Table is still safe or not hacked). The case is happening just inside
So is this possible? Sorry if this is stupid question but i'm really confusing.