Scrawlr: Crawls your website for SQL Injection
Scrawlr, short for SQL Injector and Crawler will crawl your website and will analyze the parameters of each individual pages for SQL injection vulnerabilities. Very useful tool for small to medium sized websites. Free for the first 1,500 pages.
From HPs website:
Technical details for Scrawlr
- Identify Verbose SQL Injection vulnerabilities in URL parameters
- Can be configured to use a Proxy to access the web site
- Will identify the type of SQL server in use
- Will extract table names (verbose only) to guarantee no false positives
Scrawlr does have some limitations versus our professional solutions and our fully functional SQL Injector tool
- Will only crawls up to 1500 pages
- Does not support sites requiring authentication
- Does not perform Blind SQL injection
- Cannot retrieve database contents
- Does not support JavaScript or flash parsing
- Will not test forms for SQL Injection (POST Parameters)
–aj
How to use AuthComponent in Cakephp 1.2
How do you use AuthComponent and AclComponent to authenticate users? On app_controller.php,
put this code:
class AppController extends Controller {
var $components = array(’Acl’,'Auth’,'Cookie’,'Session’);
function beforeFilter() {
$this->Auth->loginAction = ‘/users/login’;
$this->Auth->loginRedirect = ‘/questions/Various-Topics’;
$this->Auth->authorize = ‘actions’;
}
?>
and, on every controller, create a beforeFilter function and put this :
//var_dump($this->params);
this->Auth->allow(’action1′,’action2′);
parent::beforeFilter();
}
Note, however , since AuthComponent is authenticating users based on controller actions with Acl, you will have to build your own cake acl too.
PS. Thanks to ditchx and primerg for the help!
